CVE-2024-29732: critical vulnerability in Abast SCAN_VISIO eDocument Suite Web Viewer
SQL Injection vulnerability on SCAN_VISIO eDocument Suite Web Viewer from Abast
Published · Updated
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.5%
exploitation probability
0.5%top 56% of all CVEs
observed exploitation
nono source reports it
A SQL Injection has been found on SCAN_VISIO eDocument Suite Web Viewer of Abast. This vulnerability allows an unauthenticated user to retrieve, update and delete all the information of database. This vulnerability was found on login page via "user" parameter.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Abast · SCAN_VISIO eDocument Suite Web Viewer