Lucene search
HistoryJul 22, 2022 - 3:15 p.m.
CVE-2022-2135
cve-2022-2135
sql injection
unauthorized access
information disclosure
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.3 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
75.6%
The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.
Affected configurations
Node
advantechiviewRange<5.7.04.6469
| CPE | Name | Operator | Version |
|---|---|---|---|
| advantech:iview | advantech iview | lt | 5.7.04.6469 |
CNA Affected
[
{
"product": "iView",
"vendor": "Advantech iView",
"versions": [
{
"lessThan": "5_7_04_6469",
"status": "affected",
"version": "All",
"versionType": "custom"
}
]
}
]Social References
More
Related
zdi
zdi
cvelist
cvelist
CVE-2022-2135 Advantech iView
2022-06-28 00:00:00
nvd
nvd
CVE-2022-2135
2022-07-22 15:15:08
cnvd
cnvd
Advantech iView SQL Injection Vulnerability (CNVD-2023-16475)
2022-06-30 00:00:00
checkpoint_advisories
checkpoint_advisories
Advantech iView SQL Injection (CVE-2022-2135)
2022-10-30 00:00:00
prion
prion
Sql injection
2022-07-22 15:15:00
ics
ics
Advantech iView
2022-06-28 12:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.3 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
75.6%
Related for CVE-2022-2135