CVE-2024-51444

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The application insufficiently validates user input for database read queries. This could allow an authenticated remote attacker to conduct an SQL injection attack that bypasses authorization controls and allows to download any data from the application's database.

• CWE-89

• https://cert-portal.siemens.com/productcert/html/ssa-162255.htmlVendor Advisory

Published

May 13, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-51431LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials s…9.8
• CVE-2024-51432Cross Site Scripting vulnerability in FiberHome HG6544C RP27…4.8
• CVE-2024-51434Inconsistent <plaintext> tag parsing allows for XSS in Froal…6.1
• CVE-2024-5144Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-51440An issue in Nothing Tech Nothing OS v.2.6 allows a local att…7.8
• CVE-2024-51442Command Injection in Minidlna version v1.3.3 and before allo…8.8
• CVE-2024-51445A vulnerability has been identified in Polarion V2310 (All v…7.1
• CVE-2024-51446A vulnerability has been identified in Polarion V2310 (All v…5.4
• CVE-2024-51447A vulnerability has been identified in Polarion V2310 (All v…6.9
• CVE-2024-51448IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and …6.7
• CVE-2024-5145A vulnerability was found in SourceCodester Vehicle Manageme…8.8
• CVE-2024-51450IBM Security Verify Directory 10.0.0 through 10.0.3 could al…8.8