CVE-2024-9982

Summary

CVE-2024-9982 is a vulnerability affecting the AIM LINE Marketing Platform by Esi Technology. This issue arises due to inadequate validation of a query parameter. When the LINE Campaign Module is enabled, an unauthenticated attacker can inject malicious FetchXml commands, allowing them to read, modify, or delete sensitive database information. This vulnerability poses a significant risk to the confidentiality, integrity, and availability of affected systems. Organizations using the AIM LINE Marketing Platform should update to the latest version or implement proper input validation techniques to mitigate this exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.