CVE-2020-13499

Summary of CVE-2020-13499 : Talos and NVD detail multiple unauthenticated SQL injection flaws in Aveva eDNA Enterprise Data Historian CHaD.asmx web service (versions 3.0.1.2/7.5.4989.33053). The vulnerability affects the SOAP endpoint CHaD.asmx, specifically parameters such as InstancePath, Class...

CVE-2020-13500

CVE-2020-13500 is an unauthenticated SQL injection in Aveva eDNA Enterprise Data Historian’s CHaD.asmx web service. The vulnerability affects the web service endpoint and specifically the ClassName parameter, allowing crafted SOAP requests to influence the database and potentially compromise data...

CVE-2020-13505

CVE-2020-13505 affects Aveva eDNA Enterprise Data Historian’s web service (ednareporting.asmx). The parameter psClass is vulnerable to unauthenticated SQL injection via SOAP requests, enabling data compromise. Talos/documents show exploit examples and state unauthenticated access could reveal use...

CVE-2020-13501

CVE-2020-13501 affects Aveva eDNA Enterprise Data Historian CHaD.asmx web service (SOAP). The vulnerability is unauthenticated SQL injection in parameter InstanceName (and related CHaD.asmx inputs) that can lead to data compromise. Affected versions include 3.0.1.2 / 7.5.4989.33053. Exploitation ...

CVE-2020-13504

CVE-2020-13504 pertains to Aveva eDNA Enterprise Data Historian ednareporting.asmx and covers an unauthenticated SQL injection vulnerability in the AttFilterValue parameter (also related CVEs 13503, 13505, 13521 as per TALOS TALOS-2020-1108). The Talos report documents multiple SQL injection vect...