high8.1
CVE-2024-42844
A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232.
Impact
A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information
Affected products
| Product | Affected versions |
|---|---|
| EPICOR Prophet 21 (P21) | before 23.2.5232. |
Versions were read from the advisory text. No structured product data has been published for this record yet.