High severity8.8NVD Advisory· Published Jan 8, 2025· Updated Jun 17, 2026

CVE-2024-55517

Description

An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter in /SCGController is mishandled before being used in SQL queries, allowing SQL injection in an authenticated session.

Affected products

Interllect/Core Searchllm-create
Range: 9.5
Polaris FT/Intellect Core Bankingllm-fuzzy
Range: 9.5

Patches

Vulnerability mechanics

References

hackmd.io/@AowPhwc/SyvEiDsIyenvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000