CVE-2024-45955 identifies a SQL Injection vulnerability in Rocket Software Rocket Zena 4.4.1.26. The issue arises from improper sanitization of the filter parameter, allowing remote attackers to inject malicious SQL queries without authentication. This can lead to unauthorized data access, modification, or disruption of service. The vulnerability is rated high severity with a CVSS 3.1 score of 7.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no exploits have been reported in the wild.

Successful exploitation of this SQL Injection vulnerability could allow attackers to read, modify, or delete data within the affected Rocket Zena database. It may also enable disruption of service or unauthorized access to sensitive information. The vulnerability affects confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider applying compensating controls such as input validation, web application firewalls, or restricting access to the affected service where possible.