CVE-2024-2865 - SQLi in Mergen Soft Quality Management System

Back Back to CVE browser

CRITICAL

SQLi in Mergen Soft Quality Management System

Published Mar 25, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.59%

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Injection.

This issue affects Quality Management System: through 25032024.

Affected products

Vendor Mergen Software Product Quality Management System Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=25032024

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mergen Software

Quality Management System

unaffected

Version	Status	Constraints
0	affected	<=25032024

Vendor Mergentech Product Quality Management System Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <25032024

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mergentech

Quality Management System

n/a

Version	Status	Constraints
0	affected	<25032024

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27809
Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0229
government-resource
https://www.usom.gov.tr/bildirim/tr-24-0229
government-resourcebroken-link

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27809		Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0229		government-resource
https://www.usom.gov.tr/bildirim/tr-24-0229		government-resourcebroken-link