Sql injection

2023-08-0909:15:00

PRIOn knowledge base

www.prio-n.com

nozomi networks

sql injection

input validation

authenticated attacker

dbms vulnerability

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.3%

JSON

A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the alerts_count component, allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.

Authenticated users can extract arbitrary information from the DBMS in an uncontrolled way.

CPENameOperatorVersion
cmclt22.6.2
guardianlt22.6.2

CPE	Name	Operator	Version
	cmc	lt	22.6.2
	guardian	lt	22.6.2

References

security.nozominetworks.com/NN-2023:3-01