CVE-2024-6795: Baxter Connex Health Portal

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database.  An attacker could have submitted a crafted payload to Connex portal that could have resulted in modification and disclosure of database content and/or perform administrative operations including shutting down the database.

Affected products

• Baxter Connex Health Portal: before 2024-08-30 (fixed in 2024-08-30)

Published 2024-09-09. Last modified 2026-06-17.