CoreCVE
Back

HIGH

SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB

Published Dec 10, 2024

Description

SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-89

SQL Injection

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 10, 2024
Updated Dec 11, 2024
Reserved Oct 28, 2024
Link CVE-2024-51165
CISA Vulnrichment
Updated Dec 11, 2024
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2024-51165
Red Hat
Severity n/a
Public date n/a
Links CVE-2024-51165