CVE-2024-53007: Bentley Projectwise Integration Server

Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an API call.

Affected products

• Bentley Projectwise Integration Server: before 10.00.03.288 (fixed in 10.00.03.288)

Published 2025-01-31. Last modified 2026-06-17.