6.4Medium

CVE-2024-53007

Bentley ProjectWise Integration Server Published: (1 year ago)

Description

Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an API call.

Weakness (CWE): CWE-648

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Bentley ProjectWise Integration Server < 10.00.03.288

References and patches