Lucene search
+L

105 matches found

NVD
NVD
added 2022/09/19 1:15 p.m.25 views

CVE-2022-38617

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the voiceAudit:jid97 parameter at /SVFE2/pages/audit/voiceaudit.jsf...

8.8CVSS0.00766EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/19 1:15 p.m.6 views

CVE-2022-38617

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the voiceAudit:jid97 parameter at /SVFE2/pages/audit/voiceaudit.jsf...

8.8CVSS5.8AI score0.00766EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/09/19 1:15 p.m.3 views

CVE-2022-38617

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the voiceAudit:jid97 parameter at /SVFE2/pages/audit/voiceaudit.jsf...

8.8CVSS5.8AI score0.00766EPSS
SaveExploits1References4
Prion
Prion
added 2022/09/19 1:15 p.m.24 views

Sql injection

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the voiceAudit:jid97 parameter at /SVFE2/pages/audit/voiceaudit.jsf...

6.5CVSS8.9AI score0.00766EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/09/19 12:32 p.m.37 views

CVE-2022-38617

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the voiceAudit:jid97 parameter at /SVFE2/pages/audit/voiceaudit.jsf...

9.2AI score0.00766EPSS
SaveExploits1References1
CVE
CVE
added 2022/09/19 12:32 p.m.60 views

CVE-2022-38617

SmartVista SVFE2 v2.2.22 has a SQL injection vulnerability via the voiceAudit:j_id97 parameter at /SVFE2/pages/audit/voiceaudit.jsf. The issue stems from input handling allowing attacker-controlled SQL to affect the backend, with potential impact on confidentiality, integrity, and availability (C...

8.8CVSS8.9AI score0.00766EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.8 views

SmartVista SVFE2 SQL注入漏洞

SmartVista SVFE2 is a subsystem of SmartVista, Inc. A security vulnerability exists in SmartVista SVFE2 version v2.2.22, which can be exploited to achieve SQL injection via the UserForm:jid88, UserForm:jid90, UserForm:jid92 parameters of the /SVFE2/pages/feegroups/countrygroup.jsf component. id92...

8.8CVSS8.1AI score0.00662EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.7 views

PT-2022-24484 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: A SQL injection issue was found in SmartVista SVFE2, specifically via the voiceAudit:j id97 parameter at the "/SVFE2/pages/audit/voiceaudit.jsf" endpoint. This allows for potential exploitation...

8.8CVSS8.9AI score0.00766EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.9 views

PT-2022-24485 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: A SQL injection issue was found in SmartVista SVFE2. The issue is related to the UserForm:j id88, UserForm:j id90, and UserForm:j id92 parameters at the "/SVFE2/pages/feegroups/country group.jsf"...

8.8CVSS8.8AI score0.00662EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.7 views

SmartVista SVFE2 SQL注入漏洞

SmartVista SVFE2 is a subsystem of SmartVista, Inc. A security vulnerability exists in SmartVista SVFE2 version v2.2.22, which originates from an SQL injection that can be achieved by an attacker via the voiceAudit:jid97 parameter of the /SVFE2/pages/audit/voiceaudit.jsf component...

8.8CVSS8.1AI score0.00766EPSS
SaveExploits1References4
OSV
OSV
added 2022/09/13 12:15 p.m.7 views

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

8.8CVSS5.8AI score0.00766EPSS
SaveExploits1References3
NVD
NVD
added 2022/09/13 12:15 p.m.27 views

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

8.8CVSS0.00766EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/09/13 12:15 p.m.5 views

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

8.8CVSS5.8AI score0.00766EPSS
SaveExploits1References4
Prion
Prion
added 2022/09/13 12:15 p.m.19 views

Sql injection

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

6.5CVSS8.9AI score0.00766EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/09/13 11:12 a.m.32 views

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

9.2AI score0.00766EPSS
SaveExploits1References1
CVE
CVE
added 2022/09/13 11:12 a.m.54 views

CVE-2022-38616

Summary: CVE-2022-38616 affects SmartVista SVFE2 2.2.22. The issue is a SQL injection via the UserForm:j_id90 parameter at the path /feegroups/tgrt_group.jsf. Impact per public description includes high risk to confidentiality, integrity, and availability (CVSS 3.1 base score 8.8). Root cause: SQ...

8.8CVSS8.9AI score0.00766EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/09/13 12:0 a.m.6 views

SmartVista SVFE2 SQL注入漏洞

SmartVista SVFE2 is a subsystem of SmartVista, Inc. A security vulnerability exists in SmartVista SVFE2 version v2.2.22, which originates from the UserForm:jid90 parameter in /feegroups/tgrtgroup.jsf contains a SQL injection vulnerability...

8.8CVSS8.2AI score0.00766EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/09/13 12:0 a.m.8 views

PT-2022-24483 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: The issue is a SQL injection vulnerability. It can be exploited via the UserForm:j id90 parameter at the "/feegroups/tgrt group.jsf" API endpoint. Recommendations: For SmartVista SVFE2 version...

8.8CVSS8.8AI score0.00766EPSS
SaveExploits1References7
NVD
NVD
added 2022/09/09 5:15 p.m.22 views

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

8.8CVSS0.00797EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/09/09 5:15 p.m.6 views

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

8.8CVSS5.8AI score0.00797EPSS
SaveExploits1References4
Rows per page
Query Builder