CVE-2022-1731

2022-05-1618:25:41

tenable

www.cve.org

metasonic doc webclient

version 7.0.14.0

sql injection

EPSS

0.002

Percentile

54.2%

JSON

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist.

CNA Affected

[
  {
    "product": "Metasonic Doc WebClient",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2022-17

EPSS

0.002

Percentile

54.2%

JSON

Related for CVELIST:CVE-2022-1731