CVE-2019-15557

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

CVE-2019-15557

CVE-2019-15557 affects XM^online 2 User Account and Authentication server 1.0.0. All connected sources describe a SQL injection vulnerability exploitable via a tenant key, resulting in high impact (C:H/I:H/A:H per CVSS3) with network access and no authentication required. The root cause is a SQL ...