Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

36 matches found

ATTACKERKB
ATTACKERKB•added 2022/09/13 12:15 p.m.•6 views

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

8.8CVSS5.8AI score0.00781EPSS
SaveExploits1References4
Prion
Prion•added 2022/09/13 12:15 p.m.•24 views

Sql injection

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

6.5CVSS8.9AI score0.00781EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist•added 2022/09/13 11:12 a.m.•37 views

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:jid90 parameter at /feegroups/tgrtgroup.jsf...

9.2AI score0.00781EPSS
SaveExploits1References1
CVE
CVE•added 2022/09/13 11:12 a.m.•59 views

CVE-2022-38616

Summary: CVE-2022-38616 affects SmartVista SVFE2 2.2.22. The issue is a SQL injection via the UserForm:j_id90 parameter at the path /feegroups/tgrt_group.jsf. Impact per public description includes high risk to confidentiality, integrity, and availability (CVSS 3.1 base score 8.8). Root cause: SQ...

8.8CVSS8.9AI score0.00781EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies•added 2022/09/13 12:00 a.m.•10 views

PT-2022-24483 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: The issue is a SQL injection vulnerability. It can be exploited via the UserForm:j id90 parameter at the "/feegroups/tgrt group.jsf" API endpoint. Recommendations: For SmartVista SVFE2 version...

8.8CVSS8.8AI score0.00781EPSS
SaveExploits1References7
CNNVD
CNNVD•added 2022/09/13 12:00 a.m.•9 views

SmartVista SVFE2 SQL注入漏洞

SmartVista SVFE2 is a subsystem of SmartVista, Inc. A security vulnerability exists in SmartVista SVFE2 version v2.2.22, which originates from the UserForm:jid90 parameter in /feegroups/tgrtgroup.jsf contains a SQL injection vulnerability...

8.8CVSS8.2AI score0.00781EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB•added 2022/09/09 5:15 p.m.•12 views

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

8.8CVSS5.8AI score0.00813EPSS
SaveExploits1References4
NVD
NVD•added 2022/09/09 5:15 p.m.•25 views

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

8.8CVSS0.00813EPSS
SaveExploits1References1
Prion
Prion•added 2022/09/09 5:15 p.m.•25 views

Sql injection

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

6.5CVSS9.2AI score0.00813EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist•added 2022/09/09 4:22 p.m.•39 views

CVE-2022-38615

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:jid88, UserForm:jid90, and UserForm:jid92 parameters at /SVFE2/pages/feegroups/servicegroup.jsf...

9.4AI score0.00813EPSS
SaveExploits1References1
CVE
CVE•added 2022/09/09 4:22 p.m.•66 views

CVE-2022-38615

SmartVista SVFE2 v2.2.22 is affected by multiple SQL injection vulnerabilities exploitable through the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/service_group.jsf. Affected component/issue: SQL injection in SVFE2 (endpoint path shown). CVSS v3.1 ba...

8.8CVSS9.2AI score0.00813EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies•added 2022/09/09 12:00 a.m.•13 views

PT-2022-24482 · Unknown · Smartvista Svfe2

Name of the Vulnerable Software and Affected Versions: SmartVista SVFE2 version 2.2.22 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the UserForm:j id88, UserForm:j id90, and UserForm:j id92 parameters at the...

8.8CVSS9.1AI score0.00813EPSS
SaveExploits1References5
NVD
NVD•added 2019/04/30 7:29 p.m.•27 views

CVE-2018-15206

BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf...

8.8CVSS8.8AI score0.00636EPSS
SaveExploits1References1
Prion
Prion•added 2019/04/30 7:29 p.m.•15 views

Cross site request forgery (csrf)

BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf...

6.8CVSS8.7AI score0.00636EPSS
SaveExploits1References1Affected Software1
CVE
CVE•added 2019/04/30 6:42 p.m.•55 views

CVE-2018-15206

CVE-2018-15206 affects BPC SmartVista 2 with a CSRF flaw exposed at SVFE2/pages/admpages/roles/createrole.jsf. CVSSv3 indicates HIGH impact (8.8) with network attack, low complexity, no privileges, but requires user interaction; confidentiality, integrity, and availability are rated HIGH. No reme...

8.8CVSS8.7AI score0.00636EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist•added 2019/04/30 6:42 p.m.•24 views

CVE-2018-15206

BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf...

8.8AI score0.00636EPSS
SaveExploits1References1
Rows per page
Query Builder