Lucene search
HistoryJul 22, 2022 - 3:15 p.m.
CVE-2022-2137
sql injections
high privileges
unauthorized disclosure
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
60.4%
The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an unauthorized attacker to disclose information
Affected configurations
Node
advantechiviewRange<5.7.04.6469
Related
cvelist
cvelist
CVE-2022-2137 Advantech iView
2022-06-28 00:00:00
zdi
zdi
prion
prion
Sql injection
2022-07-22 15:15:00
cve
cve
CVE-2022-2137
2022-07-22 15:15:08
cnvd
cnvd
Advantech iView SQL Injection Vulnerability (CNVD-2023-16472)
2022-08-19 00:00:00
ics
ics
Advantech iView
2022-06-28 12:00:00
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
60.4%
Related for NVD:CVE-2022-2137