Unrated severityNVD Advisory· Published May 4, 2023· Updated Aug 3, 2024
Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2
CVE-2022-4259
Description
Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.
Affected products
2- Range: 0
- Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- security.nozominetworks.com/NN-2023:1-01mitrevendor-advisory
News mentions
0No linked articles in our index yet.