Lucene search

K
cveMitreCVE-2022-46501
HistoryMar 02, 2023 - 9:15 p.m.

CVE-2022-46501

2023-03-0221:15:10
CWE-89
mitre
web.nvd.nist.gov
19
cve-2022-46501
accruent llc
maintenance connection
sql injection
e-mail to work order
nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

51.9%

Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function.

Affected configurations

Nvd
Node
accruentmaintenance_connectionMatch2021
OR
accruentmaintenance_connectionMatch2022.2
VendorProductVersionCPE
accruentmaintenance_connection2021cpe:2.3:a:accruent:maintenance_connection:2021:*:*:*:*:*:*:*
accruentmaintenance_connection2022.2cpe:2.3:a:accruent:maintenance_connection:2022.2:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

51.9%

Related for CVE-2022-46501