CVE-2024-45955: SQL Injection

Published Jul 30, 2025

Updated

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter.

Affected Software

2 affected components

Rocket Software Rocket Zena

Rocketsoftware Zena=4.4.1.26

Event History

Jul 30, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-45955?

CVE-2024-45955 has been classified as a high severity vulnerability due to its potential for SQL Injection attacks.

How do I fix CVE-2024-45955?

To fix CVE-2024-45955, it is recommended to update Rocket Software Rocket Zena to the latest version that addresses this SQL Injection vulnerability.

What is the impact of CVE-2024-45955?

The impact of CVE-2024-45955 allows an attacker to execute arbitrary SQL commands in the database, potentially leading to data theft or manipulation.

Which software versions are affected by CVE-2024-45955?

CVE-2024-45955 specifically affects Rocket Software Rocket Zena version 4.4.1.26.

How can I mitigate CVE-2024-45955 if I cannot upgrade?

If an upgrade is not possible for CVE-2024-45955, consider implementing additional security controls such as input validation and web application firewalls to help mitigate the risk.