What’s Vulnerable › Vulnerabilities

CVE-2024-44903

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-25 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is available from the vendor. This is in ipac.jsp in a SELECT WHERE statement, in a part of the uri= variable in the second part of the full= inner variable.

Affected products

• SirsiDynix IPAC20: through 3.25_9382

References

• https://www.artresilia.com/cve-2024-44903-sql-injection-vulnerability-in-horizon-information-portal/
• https://www.artresilia.com/cve-2024-44903-sql-injection-vulnerability-in-horizon-information-portal/

Get alerted when CVE-2024-44903 or the next vulnerability affects your stack