CVE-2024-42844

8.1 highEPSS 0.4%

High (8.1). EPSS 0.4% chance of exploitation in the next 30 days.

A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-03-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://gist.github.com/getHecked/dc4ae46526d181d3deb17092815b9bec

Check your stack JSON