CVE-2024-0857

CRITICAL 9.8CVE-2024-0857 · Published 18/07/2024 · updated 17/06/2026

In short

CVE-2024-0857 is a CRITICAL (CVSS 9.8) vulnerability affecting flexwater corporate water management (uni-yaz).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.6% of all vulnerabilities.
Fix: update to 5.452.0 or later.

Package	Affected versions	Patched versions
flexwater corporate water management uni-yaz	`< 5.452.0`	`5.452.0`

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection. This issue affects FlexWater Corporate Water Management: before 5.452.0.

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1011
usom.gov.tr/bildirim/tr-24-1011 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free