CVE-2020-13504

Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability...

CVE-2020-13504

Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability...

CVE-2020-13505

Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability...

Sql injection

Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability...

CVE-2020-13505

CVE-2020-13505 affects Aveva eDNA Enterprise Data Historian’s web service (ednareporting.asmx). The parameter psClass is vulnerable to unauthenticated SQL injection via SOAP requests, enabling data compromise. Talos/documents show exploit examples and state unauthenticated access could reveal use...

CVE-2020-13504

CVE-2020-13504 pertains to Aveva eDNA Enterprise Data Historian ednareporting.asmx and covers an unauthenticated SQL injection vulnerability in the AttFilterValue parameter (also related CVEs 13503, 13505, 13521 as per TALOS TALOS-2020-1108). The Talos report documents multiple SQL injection vect...