CVE-2019-15016

2019-10-0920:20:28

palo_alto

www.cve.org

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that allows for unsanitized data provided by an authenticated user to be passed from the web UI into the database.

CNA Affected

[
  {
    "product": "Palo Alto Networks Zingbox Inspector",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Zingbox Inspector, versions 1.288 and earlier."
      }
    ]
  }
]

References

security.paloaltonetworks.com/CVE-2019-15016