CVE-2022-2135CWE-89

Advantech iView

High · published July 22, 2022

CVSS v3.1

7.5

EPSS

11%

Percentile

95.8

In the wild

Unconfirmed

What it is

The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.10506 · 95.8th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2022-07-22T14:58Z

EPSS history

Timeline