CVE-2020-13505 | BDVDB-2026-142199 Detail

Aveva

Description#

Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108

Exploit#

No public exploit known

History#

Version 12020-09-24Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.