Medium · 6.4 CVE-2024-53007 EUVD-2024-51771GHSA-rv26-4v2m-ch64

Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an AP…

Published Jan 31, 2025 · Updated Jan 31, 2025 · Assigned by mitre

Description

Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an API call.

Vendor	Product	Affected	Fixed
Bentley	ProjectWise Integration Server	< 10.00.03.288	10.00.03.288

CNA	v3.1	6.4
EUVD	v3.1	6.4