CVE-2020-13504

9.8 criticalEPSS 1.2%

Critical (9.8) in aveva edna enterprise data historian. EPSS 1.2% chance of exploitation in the next 30 days.

Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-09-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

aveva:edna_enterprise_data_historian

References

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108

Check your stack JSON