Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5pj4-xx5h-fm6m

Опубликовано: 14 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.

EPSS

Процентиль: 33%
0.00135
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 6.8
nvd
6 месяцев назад

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

CVSS3: 6.8
msrc
6 месяцев назад

Configuration Manager Elevation of Privilege Vulnerability

EPSS

Процентиль: 33%
0.00135
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-89