Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: AVEVA Component: Edna Enterprise Data Historian Clear all filters
TI-2020-10586 CVE-2020-13501 · GHSA-65w4-p422-2r48

SQL injection in Aveva

Priority MEDIUM 47

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02912 Published 2020-09-24 No fix listed CWE-89
TI-2020-10585 CVE-2020-13500 · GHSA-97q5-v434-9c8f

SQL injection in Aveva

Priority MEDIUM 47

SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02912 Published 2020-09-24 No fix listed CWE-89
TI-2020-10584 CVE-2020-13499 · GHSA-rhfw-3659-4c6v

SQL injection in Aveva

Priority MEDIUM 47

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02912 Published 2020-09-24 No fix listed CWE-89
TI-2020-10588 CVE-2020-13505 · GHSA-w944-cr63-4f5x

SQL injection in Aveva

Priority MEDIUM 44

Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01183 Published 2020-09-24 No fix listed CWE-89
TI-2020-10587 CVE-2020-13504 · GHSA-mpqr-xh68-rm34

SQL injection in Aveva

Priority MEDIUM 44

Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01183 Published 2020-09-24 No fix listed CWE-89