CVE-2022-23320

XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries

published February 7, 2022

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01644 · 76.2th percentile
Published
2022-02-07T10:47Z
EPSS history
Timeline
  • 07 FEB 10:47Z
    XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries
    cvelistv5