AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-13501

CRITICAL · CVSS 9.8 EPSS 2.91%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-09-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-13501
Severity
CRITICAL
CVSS
9.8
EPSS
2.91%

Original NVD Description

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstanceName in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.