CVE-2023-47460

CVE-2023-47460 affects Knovos Discovery v.22.67.0. A SQL injection in the endpoint /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure lets a remote attacker execute arbitrary code with high impact (C,H/I,H/A,H) and network attack vector. Public references in Red Hat, NVD, CNNVD, and other...

CVE-2023-47459

CVE-2023-47459 concerns Knovos Discovery v.22.67.0. The issue enables a remote attacker to obtain sensitive information via the endpoint "/DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName". The available connected sources confirm the affected version and the specific component path, ...