Code injection

2021-11-2615:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.3%

An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.

CPENameOperatorVersion
unified_threat_management_up2datelt9.708

CPE	Name	Operator	Version
	unified_threat_management_up2date	lt	9.708

References

www.sophos.com/en-us/security-advisories/sophos-sa-20211126-sg-sqli