CVE-2024-44903: Sirsidynix IPAC20

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is available from the vendor. This is in ipac.jsp in a SELECT WHERE statement, in a part of the uri= variable in the second part of the full= inner variable.

Affected products

• Sirsidynix IPAC20: up to and including 3.25_9382

Published 2025-03-25. Last modified 2026-06-17.