CVE-2021-36807

An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8

High · published November 26, 2021

CVSS v3.1
8.8
EPSS
1%
Percentile
74.0
In the wild
Unconfirmed
What it is

An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01498 · 74.0th percentile
Published
2021-11-26T14:12Z
EPSS history
Timeline
  • 26 NOV 14:12Z
    An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8
    cvelistv5