SQL Injection Vulnerability in Tuleap Enterprise Edition by 3DS
CVE-2026-105412

7.1HIGH

Key Information:

Vendor

Dassault Systèmes

Status
Tuleap Enterprise Edition
Vendor
CVE Published:
12 October 2026

What is CVE-2026-105412?

An SQL Injection vulnerability found in Tuleap Enterprise Edition 17.5 allows attackers to potentially gain unauthorized read access to the underlying database. This could lead to exposure of sensitive information stored within, necessitating prompt action to secure systems against potential exploitation.

Affected Version(s)

Tuleap Enterprise Edition 17.5-1 <= 17.5-35

References

https://www.3ds.com/trust-center/security/security-adviso...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.