CVE-2022-34324

2023-01-0100:00:00

mitre

www.cve.org

sql injections

sage xrt business exchange

authenticated attacker

malicious data

add currencies

payment order

transfer history

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.2%

JSON

Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment Order, and Transfer History.

References

www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_sqli_1.pdf