Skip to content
OpenAdvisories
High · 8.8 CVE-2024-13955 EUVD-2024-54583GHSA-hrcg-68ff-5vg7

SQL Injection 2nd Order

Published May 22, 2025 · Updated May 22, 2025 · Assigned by ABB

Description

2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Affected products

VendorProductAffectedFixed
ABB ASPECT-Enterprise ≤ 3.* —
ABB NEXUS Series ≤ 3.* —
ABB MATRIX Series ≤ 3.* —

Advisories 1

References