CVE-2024-8308: Siempelkamp: SQL injection due to improper handling of HTTP request input data
6.5
CVSS
Description
A low privileged remote attacker can insert a SQL injection in the web application due to improper handling of HTTP request input data which allows to exfiltrate all data.
Classification
CVE ID: CVE-2024-8308
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.5
Affected Products
Vendor: Siempelkamp
Product: UmweltOffice
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)