CVE-2023-23574

A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the alertscount component, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application. Authenticated users may be able to extract arbitrar...

CVE-2023-23574

CVE-2023-23574 – Nozomi Networks Guardian/CMC exposes an authenticated blind SQL Injection in the alerts_count component caused by improper input validation. Affected before version 22.6.2, this allows an authenticated attacker to run arbitrary SQL against the web application's DBMS, potentially ...