Количество 3
Количество 3
CVE-2023-37197
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the mass configuration settings of endpoints on DCE.
GHSA-39jj-553f-8jjw
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the mass configuration settings of endpoints on DCE.
BDU:2023-03694
Уязвимость системы мониторинга критически важного оборудования StruxureWare Data Center Expert, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю изменять или удалять произвольный контент
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-37197 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the mass configuration settings of endpoints on DCE. | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад |
| GHSA-39jj-553f-8jjw A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the mass configuration settings of endpoints on DCE. | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад |
 | BDU:2023-03694 Уязвимость системы мониторинга критически важного оборудования StruxureWare Data Center Expert, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю изменять или удалять произвольный контент | CVSS3: 8.8 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу