CVE-2024-53007
Quick assessment
Affected
Bentley ProjectWise Integration Server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Bentley Systems ProjectWise Integration Server是美国Bentley Systems公司的一款应用程序。 Bentley Systems ProjectWise Integration Server 10.00.03.288之前版本存在安全漏洞。攻击者利用该漏洞可以通过 API 调用执行意外的 SQL 查询。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-53007
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an API call.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
特权API的不正确使用
Source: CVE Program / CVE List V5
Vulnerability Title
Bentley Systems ProjectWise Integration Server 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Bentley Systems ProjectWise Integration Server是美国Bentley Systems公司的一款应用程序。 Bentley Systems ProjectWise Integration Server 10.00.03.288之前版本存在安全漏洞。攻击者利用该漏洞可以通过 API 调用执行意外的 SQL 查询。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Bentley | ProjectWise Integration Server | 0 ~ 10.00.03.288 | - |
|
II. Public POCs for CVE-2024-53007
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-53007
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-53007 (1)
IV. Related Vulnerabilities
Same vendor: Bentley
-
CVE-2022-43656
Bentley View FBX File Parsing Out-Of-Bounds Read Information -
CVE-2022-43655
Bentley View FBX File Parsing Heap-based Buffer Overflow Rem -
CVE-2022-43653
Bentley View SKP File Parsing Out-Of-Bounds Write Remote Cod -
CVE-2022-43652
Bentley View SKP File Parsing Use-After-Free Information Dis -
CVE-2022-43651
Bentley View SKP File Parsing Use-After-Free Remote Code Exe
Same weakness: CWE-648
-
CVE-2026-63727
Anchore Enterprise Privilege Escalation via User Management -
CVE-2026-54424
Unity parsec 权限许可和访问控制问题漏洞 -
CVE-2026-11877
Missing Authorization Vulnerability in OpenText Access Manag -
CVE-2026-41225
iControl REST vulnerability -
CVE-2026-41386
OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Boot
V. Comments for CVE-2024-53007
No comments yet