CVE-2019-17128

Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters and parameter name of the login page…

published October 9, 2019

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters and parameter name of the login page through a GET request. The injection allows an attacker to read sensitive information from the database used by the application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01836 · 78.8th percentile
Published
2019-10-09T15:07Z
EPSS history
Timeline
  • 09 OCT 15:07Z
    Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters and parameter name of the login page…
    cvelistv5