Lucene search

[email protected]CVE-2022-4422

HistoryJan 10, 2023 - 2:15 p.m.

CVE-2022-4422

2023-01-1014:15:10

CWE-89

[email protected]

web.nvd.nist.gov

cve-2022-4422

call center system

bulutses information technologies

sql injection

vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0

Affected configurations

NVD

Node

bulutsesbulutdesk_callcenterRange<3.0

CPENameOperatorVersion
bulutses:bulutdesk_callcenterbulutses bulutdesk callcenterlt3.0

CPE	Name	Operator	Version
bulutses:bulutdesk_callcenter	bulutses bulutdesk callcenter	lt	3.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Bulutdesk Callcenter",
    "vendor": "Bulutses Information Technologies",
    "versions": [
      {
        "lessThan": "3.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-22-0747

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

Related for CVE-2022-4422

cvelist1 prion1 nvd1