CVE-2023-3983

An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752

published July 31, 2023

CVSS
—
EPSS
17%
Percentile
97.0
In the wild
Unconfirmed
What it is

An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform blind SQL injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16705 · 97.0th percentile
Published
2023-07-31T00:00Z
EPSS history
Timeline
  • 31 JUL 00:00Z
    An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752
    cvelistv5