PT-2025-18099 · Opentext · Openasset Digital Asset Management

Published 2025-04-28 · Updated 2025-04-28 · CVE-2024-12706

Positive Technologies (AI Summary)

CVSS v4.0

2.1

Low

Base vector

AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:C/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions OpenText Digital Asset Management versions through 24.4

Description The issue is related to an SQL Injection vulnerability, which could allow an authenticated user to run arbitrary SQL commands on the underlying database. This problem affects Digital Asset Management.

Recommendations For OpenText Digital Asset Management versions through 24.4, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the database and limiting the privileges of authenticated users to minimize the risk of exploitation.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-12706

Affected Products

Openasset Digital Asset Management

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-12706 · Security Note
• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0840263 · Note
• https://twitter.com/CVEnew/status/1916920706614628510 · Twitter Post
• https://t.me/cvetracker/22551 · Telegram Post
• https://t.me/cvedetector/23940 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1916936403536974279 · Twitter Post