Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4608
HistoryOct 25, 2023 - 6:17 p.m.

Sql injection

2023-10-2518:17:00
PRIOn knowledge base
www.prio-n.com
5
sql injection
authenticated user
blind injection
thinksystem v2
thinksystem v3
xcc
elevated privileges
api command

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.

This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

Related for PRION:CVE-2023-4608