Security Advisory

CVE-2024-24256

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-02-15 00:00:00
Last updated 2024-11-25 17:42:08
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hr_position directory.