Lucene search
Df4dee71-de3a-4139-9588-11b62fe6c0ffNVD:CVE-2024-6632HistoryAug 27, 2024 - 3:15 p.m.
CVE-2024-6632
2024-08-2715:15:17
CWE-89
df4dee71-de3a-4139-9588-11b62fe6c0ff
web.nvd.nist.gov
5
filecatalyst
workflow
sql injection
confidentiality
integrity
availability
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability.
Affected configurations
Node
fortrafilecatalyst_workflowRange5.0.4–5.1.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fortra | filecatalyst_workflow | * | cpe:2.3:a:fortra:filecatalyst_workflow:*:*:*:*:*:*:*:* |
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2024-6632