CVE-2020-6153

...

CVE-2020-6153

CVE-2020-6153 is an unauthenticated SQL injection vulnerability in Aveva eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053, specifically in the FavoritesService.asmx SOAP web service. The vulnerability affects the FavoriteID parameter in FavoritesService.asmx, allowing an unauthenticated atta...