CVE-2021-22508CWE-20
Potential SQL injection in OpenText Operations Bridge Reporter
High · published May 17, 2024
What it is
A potential vulnerability has been identified for OpenText Operations Bridge Reporter. The vulnerability could be exploited to inject malicious SQL queries. An attack requires to be an authenticated administrator of OBR with network access to the OBR web application.
The record
Technical detail
- CVSS v3.1
- 7.2 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00435 · 36.8th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2024-05-17T18:32Z
EPSS history
Timeline