Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:2 a.m.7 views

CVE-2023-36663

it-novum openITCOCKPIT aka open IT COCKPIT 4.6.4 before 4.6.5 allows SQL Injection by authenticated users via the sort parameter of the API interface...

8.8CVSS8AI score0.0071EPSS
SaveExploits0
OSV
OSV
added 2023/06/25 12:0 a.m.18 views

CVE-2023-36663

it-novum openITCOCKPIT aka open IT COCKPIT 4.6.4 before 4.6.5 allows SQL Injection by authenticated users via the sort parameter of the API interface...

8.3AI score
SaveExploits0References4
CVE
CVE
added 2023/06/25 12:0 a.m.60 views

CVE-2023-36663

OpenITCOCKPIT (It-novum) 4.6.4 is vulnerable to SQL injection via the API interface’s sort parameter when accessed by authenticated users, due to a flaw in the input handling. Affects versions 4.6.4 prior to 4.6.5. Mitigation: upgrade to 4.6.5 or apply vendor-provided security update; as a tempor...

8.8CVSS9AI score0.0071EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/06/25 12:0 a.m.37 views

CVE-2023-36663

it-novum openITCOCKPIT aka open IT COCKPIT 4.6.4 before 4.6.5 allows SQL Injection by authenticated users via the sort parameter of the API interface...

9.3AI score0.0071EPSS
SaveExploits0References2
Rows per page
Query Builder