CVE-2020-15792CWE-89

A vulnerability has been identified in Desigo Insight (All versions)

published October 15, 2020

CVSS
—
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00995 · 62.3th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2020-10-15T18:45Z
EPSS history
Timeline
  • 15 OCT 18:45Z
    A vulnerability has been identified in Desigo Insight (All versions)
    cvelistv5