3 matches found
CVE-2018-13442
SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter...
8.8CVSS9.2AI score0.01665EPSS
SaveExploits0References1
CVE-2018-13442
The CVE-2018-13442 entry concerns SolarWinds Network Performance Monitor 12.3 and an SQL Injection vulnerability exposed via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter. Multiple connected sources describe the root cause as lack of proper validation of ...
8.8CVSS9.1AI score0.01665EPSS
SaveExploits0References1Affected Software1
CVE-2018-13442: Improper Neutralization of Special Elements used in an SQL Command
SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter...
8.8CVSS5.8AI score0.01665EPSS
SaveExploits0References2
20