Sql injection

2021-12-0219:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data.

CPENameOperatorVersion
ca_network_flow_analysislt21.2.2

CPE	Name	Operator	Version
	ca_network_flow_analysis	lt	21.2.2

References

seclists.org/fulldisclosure/2021/Dec/0

support.broadcom.com/external/content/security-advisories/CA20211201-01-Security-Notice-for-CA-Network-Flow-Analysis/19689