Vulnetix
Try Vulnetix Request Demo
CVE-2024-0985 PUBLISHED CVSS 8 HIGH

An attacker can provide untrusted materialized views and lure a high privileged authorized user to inadvertently execute arbitrary SQL functions by refreshing the attacker's materialized view.

EPSS 0.77% · 73.5th percentile

Risk Scores

CVSS v3.1
8
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
EPSS Score
0.77%
73.5th percentile

Affected Products

VendorProductVersions
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3 RU2
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3
ABBABB Ability™ Symphony® Plus S+ Engineering 2.2
ABBABB Ability™ Symphony® Plus S+ Engineering 2.4
ABBABB Ability™ Symphony® Plus S+ Engineering 2.4 SP2
ABBABB Ability™ Symphony® Plus S+ Engineering 2.4 SP1
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3 RU3
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3 RU1

Timeline

References

Open in Interactive Console →