High severity · published May 14, 2025
CVE-2024-10864
SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication.
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Advance Authentication · OpenText
6.5 before < · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-10864
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-10864
www.netiq.com
https://www.netiq.com/documentation/advanced-authentication-65/advanced-authentication-releasenotes-6.5/data/advanced-authentication-releasenotes-6.5.html
More from Advance Authentication
9.4
CVE-2024-10865
Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication