CVE-2022-0507CWE-89

Vulnerability: Authenticated SQL Injection in API

Medium · published March 9, 2022

CVSS v3.1
5.8
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01235 · 68.8th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-03-09T15:09Z
EPSS history
Timeline
  • 09 MAR 15:09Z
    Vulnerability: Authenticated SQL Injection in API
    cvelistv5