CVE-2022-2142CWE-89

Advantech iView

High · published July 22, 2022

CVSS v3.1

8.1

EPSS

Percentile

59.8

In the wild

Unconfirmed

What it is

The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information.

The record

Technical detail

CVSS v3.1: 8.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00917 · 59.8th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2022-07-22T14:59Z

EPSS history

Timeline