CVE-2024-53007
Medium
Description
Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an API call.
SeverityMedium
CVSS6.4
Exploit probability—
ProductProjectWise Integration Server
PublishedJan 31, 2025
First seenJan 31, 2025
Weakness typeCWE-648CWE-648
How to fix
Update
- Bentley ProjectWise Integration Server10.00.03.288 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Bentley ProjectWise Integration Server | v < 10.00.03.288 | 10.00.03.288 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.