CVE-2020-11597

2020-04-0621:32:15

mitre

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

74.9%

JSON

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request and inject SQL statements in the user context of the db owner.

References

www.criticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform/