Sql injection

2019-07-1618:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

JSON

SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter.

CPENameOperatorVersion
network_performance_monitorle12.3

CPE	Name	Operator	Version
	network_performance_monitor	le	12.3

References

labs.nettitude.com/blog/cve-2018-13442-solarwinds-npm-sql-injection/