CVE-2024-55517
An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter in /SCGController is mishandled befo…
Published: 2025-01-08 · CVSS: 8.8 · CVSS 3.1
An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter in /SCGController is mishandled before being used in SQL queries, allowing SQL injection in an authenticated session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7