Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-125038

Опубликовано: 02 янв. 2023
Источник: nvd
CVSS3: 5.5
CVSS3: 9.8
CVSS2: 5.2
EPSS Низкий

Описание

A vulnerability has been found in IS_Projecto2 and classified as critical. This vulnerability affects unknown code of the file Cnn-EJB/ejbModule/ejbs/NewsBean.java. The manipulation of the argument date leads to sql injection. The name of the patch is aa128b2c9c9fdcbbf5ecd82c1e92103573017fe0. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217192.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:is_projecto2_project:is_projecto2:*:*:*:*:*:*:*:*
Версия до 2014-11-12 (исключая)

EPSS

Процентиль: 53%
0.00297
Низкий

5.5 Medium

CVSS3

9.8 Critical

CVSS3

5.2 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

github логотип

GHSA-fxj2-27m5-3x24

CVSS3: 9.8
github
около 3 лет назад

A vulnerability has been found in IS_Projecto2 and classified as critical. This vulnerability affects unknown code of the file Cnn-EJB/ejbModule/ejbs/NewsBean.java. The manipulation of the argument date leads to sql injection. The name of the patch is aa128b2c9c9fdcbbf5ecd82c1e92103573017fe0. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217192.

EPSS

Процентиль: 53%
0.00297
Низкий

5.5 Medium

CVSS3

9.8 Critical

CVSS3

5.2 Medium

CVSS2

Дефекты

CWE-89