Lucene search

K
nvd[email protected]NVD:CVE-2022-0495
HistorySep 21, 2022 - 9:15 a.m.

CVE-2022-0495

2022-09-2109:15:09
CWE-89
web.nvd.nist.gov

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

0.002 Low

EPSS

Percentile

51.6%

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.

Affected configurations

NVD
Node
parantezteknolojikoha_library_automationRange<19.05.03.01

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

0.002 Low

EPSS

Percentile

51.6%

Related for NVD:CVE-2022-0495