CVE Feed

    Dashboard / CVE / CVE-2024-13955

    CVE-2024-13955

    2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

    Published:May 22, 2025
    Last Modified:Apr 15, 2026
    EPS:May 22, 2025
    EPSS Score:0.00186
    CVSS Score:8.8

    Affected Products

    Vendor
    Abb
    Product
    Aspect Enterprise
    Vendor
    Abb
    Product
    Matrix Series
    Vendor
    Abb
    Product
    Nexus Series

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-7679 (CVSS 9.2) — The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT…
    CVE-2025-7677 (CVSS 8.2) — A denial-of-service (DoS) attack is possible if access to the local network is provided to unauthorized users.…
    CVE-2025-53191 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53190 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53189 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53188 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53187 (CVSS 9.3) — Due to an issue in configuration, code that was intended for debugging purposes was included in the market rel…
    CVE-2024-13945 (CVSS 8.4) — Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credent…
    CVE-2024-51552 (CVSS 7.1) — Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issu…
    CVE-2024-13958 (CVSS 4.6) — Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedTh…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High