VDB

CVE-2024-0985

CVE-2024-0985 PUBLISHED CVSS 8 HIGH

An attacker can provide untrusted materialized views and lure a high privileged authorized user to inadvertently execute arbitrary SQL functions by refreshing the attacker's materialized view.

EPSS 0.75% · 73.6th percentile

Risk Scores

CVSS 3.1
8
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
EPSS Score
0.75%
73.6th percentile

Affected Products

VendorProductVersions
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3 RU2
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3
ABBABB Ability™ Symphony® Plus S+ Engineering 2.2
ABBABB Ability™ Symphony® Plus S+ Engineering 2.4
ABBABB Ability™ Symphony® Plus S+ Engineering 2.4 SP2
ABBABB Ability™ Symphony® Plus S+ Engineering 2.4 SP1
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3 RU3
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3 RU1

Timeline

  • Feb 8, 2024 EPSS Score
  • Feb 8, 2024 CVE Published
  • Mar 6, 2024 EPSS Score
  • Apr 2, 2024 EPSS Score
  • May 27, 2024 EPSS Score
  • Jun 23, 2024 EPSS Score
  • Jul 20, 2024 EPSS Score
  • Aug 20, 2024 EPSS Score
  • Sep 16, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Nov 9, 2024 EPSS Score
  • Dec 8, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›