CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-6795
Severity
CRITICAL
CVSS
10
EPSS
0.60%
Original NVD Description
In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database. An attacker could have submitted a crafted payload to Connex portal that could have resulted in modification and disclosure of database content and/or perform administrative operations including shutting down the database.
Related CVEs
Other vulnerabilities affecting the same vendor(s)