CVE-2024-8308: Siempelkamp Umweltoffice

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A low privileged remote attacker can insert a SQL injection in the web application due to improper handling of HTTP request input data which allows to exfiltrate all data.

Affected products

• Siempelkamp Umweltoffice: before 7.4.3 (fixed in 7.4.3)

Published 2024-11-28. Last modified 2026-06-17.