Sql injection

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

Sql injection

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

CVE-2019-15557

CVE-2019-15557 affects XM^online 2 User Account and Authentication server 1.0.0. All connected sources describe a SQL injection vulnerability exploitable via a tenant key, resulting in high impact (C:H/I:H/A:H per CVSS3) with network access and no authentication required. The root cause is a SQL ...

CVE-2019-15558

CVE-2019-15558 affects XM^online 2 Common Utils and Endpoints 0.2.1. The vulnerability is a SQL injection tied to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java. CVSS metrics from NVD indicate a NETWORK-exposed, LOW-complexity attack with HIGH confidentiality, integrity, a...

CVE-2019-15557: Improper Neutralization of Special Elements used in an SQL Command

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

CVE-2019-15558: Improper Neutralization of Special Elements used in an SQL Command

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...