How severe is CVE-2024-8259?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Eryaz Information Technologies Natracar B2b Dealer Management Program

CVE-2024-8259

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eryaz Information Technologies NatraCar B2B Dealer Management Program allows SQL Injection. This issue affects NatraCar B2B Dealer Manag…

Vulnerability class: SQL Injection

EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Eryaz Information Technologies Natracar B2b Dealer Management Program — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

iletisim@usom.gov.tr (government-resource, broken-link)
iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2024-8259?: CVE-2024-8259 is a critical-severity vulnerability in Eryaz Information Technologies Natracar B2b Dealer Management Program, classified under SQL Injection. CVSS score: 9.8/10. Published 2024-12-09.
How severe is CVE-2024-8259?: Critical severity. CVSS v3 base score is 9.8 out of 10.