PT-2021-22989

Name of the Vulnerable Software and Affected Versions Genesys intelligent Workload Distribution IWD versions prior to 9.0.013.11 Description A SQL Injection issue in the custom filter query component allows an attacker to execute arbitrary SQL queries via the ql expression parameter. This enables...

CVE-2021-40860: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution IWD before 9.0.013.11 allows an attacker to execute arbitrary SQL queries via the qlexpression parameter, with which all data in the database can be extracted and OS command execution is possible...

CVE-2021-40861: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution IWD 9.0.017.07 allows an attacker to execute arbitrary SQL queries via the value attribute, with which all data in the database can be extracted and OS command execution is possible depending on the...

PT-2021-22990

Name of the Vulnerable Software and Affected Versions Genesys intelligent Workload Distribution IWD version 9.0.017.07 Description A SQL Injection issue in the custom filter query component allows an attacker to execute arbitrary SQL queries via the value attribute. This enables the extraction of...