CVE-2024-9678

4.9 mediumEPSS 0.8%

Medium (4.9). EPSS 0.8% chance of exploitation in the next 30 days.

An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading to command execution.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-12-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://thrive.trellix.com/s/article/000013964

Check your stack JSON