CVE-2022-42986

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-39122. Reason: This candidate is a reservation duplicate of CVE-2023-39122. Notes: All CVE users should reference CVE-2023-39122 instead of this candidate. All references and descriptions in this candidate have been removed t...

PT-2023-14168 · Undefined · Undefined

‼ CVE-2022-42986 ‼ REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-39122. Reason: This candidate is a reservation duplicate of CVE-2023-39122. Notes: All CVE users should reference CVE-2023-39122 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2023-39122

BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 and is also fixed by a patch for 9.0.20.200...

CVE-2023-39122

Summary: CVE-2023-39122 affects BMC Control-M ≤ 9.0.20.200, where an SQL injection is possible via the /RF-Server/report/deleteReport endpoint using the report-id parameter. The root cause is a SQL injection vulnerability in that API path. The issue is fixed in version 9.0.21, and is also mitigat...

CVE-2022-42986

CVE-2022-42986 is rejected/not used; reference CVE-2023-39122 instead.