3 matches found
CVE-2022-36635
ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...
8.8CVSS8.2AI score0.1704EPSS
SaveExploits3References1
CVE-2022-36635
CVE-2022-36635 affects ZKTeco ZKBioSecurity V5000 (version 4.1.3) with a SQL injection in the /baseOpLog.do component. The root cause is a lack of input validation for external SQL statements, enabling attackers to obtain sensitive DB information. The CVSSv3.1 metrics indicate Network access, Low...
8.8CVSS9AI score0.1704EPSS
SaveExploits3References1Affected Software1
20