Lucene search

K
cve[email protected]CVE-2012-0234
HistoryFeb 21, 2012 - 1:31 p.m.

CVE-2012-0234

2012-02-2113:31:56
CWE-89
web.nvd.nist.gov
32
cve-2012-0234
sql injection vulnerability
advantech
broadwin webaccess
remote attack

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.0%

SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a malformed URL.

Affected configurations

NVD
Node
advantechadvantech_webaccessRange6.0
OR
advantechadvantech_webaccessMatch5.0

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.0%

Related for CVE-2012-0234