CVE-2024-0857

9.8 criticalEPSS 0.4%

Critical (9.8) in uni-yaz flexwater corporate water management. EPSS 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection. This issue affects FlexWater Corporate Water Management: before 5.452.0.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-07-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

uni-yaz:flexwater_corporate_water_management

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1011
https://www.usom.gov.tr/bildirim/tr-24-1011
https://www.usom.gov.tr/bildirim/tr-24-1011

Check your stack JSON