CVE-2024-0857

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection. This issue affects FlexWater Corporate Water Management: before 5.452.0.

Score

CVSS 3.1 9.8 Critical

Status

Modified - iletisim@usom.gov.tr

Published

2024-07-18

Last modified

2026-06-03

Weaknesses

CWE-89

Affected products

• Flexwater Corporate Water Management (Uni-yaz)
• Flexwater Corporate Water Management (Universal Software Inc)
• Flexwater Corporate Water Management (Universal Software Inc.)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1011
• https://www.usom.gov.tr/bildirim/tr-24-1011