4 matches found
CVE-2022-47072
SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box...
9.8CVSS8.2AI score0.00629EPSS
SaveExploits1
Sql injection
SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box...
7.5CVSS8.7AI score0.00629EPSS
SaveExploits1References1Affected Software1
CVE-2022-47072
CVE-2022-47072 affects Sparx Systems Enterprise Architect 16.0.1605 (32-bit). The vulnerability is a SQL injection in the Find parameter of the Select Classifier dialog box, enabling execution of arbitrary SQL commands. Root cause: unsafely handling user-controlled input in the dialog’s Find para...
9.8CVSS9.7AI score0.00629EPSS
SaveExploits1References1Affected Software1
20