Skip to content
OpenAdvisories
High · 7.2 CVE-2024-13928 EUVD-2024-54572GHSA-cq8v-wvwh-vcpg

Authenticated SQL Injection

Published May 22, 2025 · Updated May 22, 2025 · Assigned by ABB

Description

SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session administrator credentials become compromised.
This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.

Affected products

VendorProductAffectedFixed
ABB ASPECT-Enterprise ≤ 3.08.03 —
ABB NEXUS Series ≤ 3.08.03 —
ABB MATRIX Series ≤ 3.08.03 —

Advisories 2

References