Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

CVE-2024-10864

Severity CVSS v4.0:
HIGH
Type:
CWE-89 SQL Injection
Publication date:
14/05/2025
Last modified:
16/05/2025

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5

Impact

Vector 4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N/U:Green CVSS v4.0 Severity and Metrics:

Base Score: 7.50 HIGH
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N/U:Green

Attack Vector (AV): Network
Attack Complexity (AC): High
Attack Requirements (AT): None
Privileges Required (PR): High
User Interaction (UI): None
Confidentiality (VC): High
Integrity (VI): High
Availability (VA): Low
Confidentiality (SC): Low
Integrity (SI): Low
Availability (SA): None
Provider Urgency (U): Green

Base Score 4.0
7.50
Severity 4.0
HIGH

References to Advisories, Solutions, and Tools