Lucene search
Fluid AttacksCVELIST:CVE-2022-25225HistoryMar 08, 2022 - 2:19 p.m.
CVE-2022-25225
2022-03-0814:19:27
Fluid Attacks
www.cve.org
1
network olympus
version 1.8.0
sql injection
remote code execution
authenticated admin user
json parameter
postgresql
Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in ‘/api/eventinstance’ via the ‘sqlparameter’ JSON parameter. It is also possible to achieve remote code execution in the default installation (PostgreSQL) by exploiting this issue.
CNA Affected
[
{
"product": "Network Olympus",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "1.8.0"
}
]
}
]Related
prion
prion
Remote code execution
2022-03-10 17:47:00
cnvd
cnvd
Network Olympus SQL Injection Vulnerability
2022-03-14 00:00:00
cve
cve
CVE-2022-25225
2022-03-10 17:47:02
nvd
nvd
CVE-2022-25225
2022-03-10 17:47:02