Lucene search
TalosCVELIST:CVE-2020-27239HistoryApr 15, 2021 - 1:38 p.m.
CVE-2020-27239
2021-04-1513:38:43
CWE-89
talos
www.cve.org
3
sql injection
openclinic ga
http request
cve-2020-27239
CVSS3
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
EPSS
0.003
Percentile
68.9%
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The assetStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability.
CNA Affected
[
{
"product": "OpenClinic",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "OpenClinic GA 5.173.3"
}
]
}
]Related
cve
cve
CVE-2020-27239
2021-04-15 14:15:15
nvd
nvd
CVE-2020-27239
2021-04-15 14:15:15
prion
prion
Sql injection
2021-04-15 14:15:00
checkpoint_advisories
checkpoint_advisories
talos
talos
CVSS3
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
EPSS
0.003
Percentile
68.9%
Related for CVELIST:CVE-2020-27239