CVE-2023-32115CWE-89
SQL Injection in Master Data Synchronization (MDS COMPARE TOOL)
Medium · published June 13, 2023
What it is
An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.
The record
Technical detail
- CVSS v3.1
- 4.2 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00217 · 11.5th percentile
- Weakness
- CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Published
- 2023-06-13T02:42Z
EPSS history
Timeline