CVE-2019-13027: Realization Concerto Critical Chain Planner

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter.

Affected products

• Realization Concerto Critical Chain Planner: version 5.10.8071 only

Published 2019-07-12. Last modified 2026-06-17.