CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

CVE-2022-38616

Summary: CVE-2022-38616 affects SmartVista SVFE2 2.2.22. The issue is a SQL injection via the UserForm:j_id90 parameter at the path /feegroups/tgrt_group.jsf. Impact per public description includes high risk to confidentiality, integrity, and availability (CVSS 3.1 base score 8.8). Root cause: SQ...