PT-2022-24486 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: The issue is a SQL injection vulnerability. It can be exploited via the UserForm:j id90 parameter at the "/SVFE2/pages/feegroups/mcc group.jsf" endpoint. Recommendations: For SmartVista SVFE2 versi...