CVE-2024-0857

CRITICAL

Universal Software Inc. FlexWater <5.452.0 - SQL Injection

Title source: llm

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection. This issue affects FlexWater Corporate Water Management: before 5.452.0.

References (2)

Core 2

Core References

Third Party Advisory government-resource broken-link

https://www.usom.gov.tr/bildirim/tr-24-1011

Government Resource government-resource

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1011

Scores

CVSS v3 9.8

EPSS 0.0042

EPSS Percentile 33.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-89

Status published

Products (2)

uni-yaz/flexwater_corporate_water_management < 5.452.0

Universal Software Inc./FlexWater Corporate Water Management < 5.452.0

Published Jul 18, 2024

Tracked Since Feb 18, 2026