PT-2022-24483 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: The issue is a SQL injection vulnerability. It can be exploited via the UserForm:j id90 parameter at the "/feegroups/tgrt group.jsf" API endpoint. Recommendations: For SmartVista SVFE2 version...