Critical severity9.8NVD Advisory· Published Sep 24, 2020· Updated Jun 17, 2026
CVE-2020-13499
CVE-2020-13499
Description
An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstancePath in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- eDNA/eDNA Enterprise Data Historiandescription
- Range: 3.0.1.2/7.5.4989.33053
Patches
Vulnerability mechanics
References
2- talosintelligence.com/vulnerability_reports/TALOS-2020-1106nvdExploitTechnical DescriptionThird Party Advisory
- us-cert.cisa.gov/ics/advisories/icsa-20-254-01nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.