Sql injection

2022-05-1720:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

JSON

Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.

CPENameOperatorVersion
deceptionlt9.4.5
networklt9.4.5

CPE	Name	Operator	Version
	deception	lt	9.4.5
	network	lt	9.4.5

References

fidelissecurity.zendesk.com/hc/en-us/articles/6211730139411