Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-0754
HistoryMar 07, 2022 - 12:45 p.m.

CVE-2022-0754 SQL Injection in salesagility/suitecrm

2022-03-0712:45:24
CWE-89
@huntrdev
www.cve.org
4
sql injection
salesagility
suitecrm
github
prior to 7.12.5

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS

0.001

Percentile

30.4%

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5.

CNA Affected

[
  {
    "product": "salesagility/suitecrm",
    "vendor": "salesagility",
    "versions": [
      {
        "lessThan": "7.12.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS

0.001

Percentile

30.4%

Related for CVELIST:CVE-2022-0754