← CVE Intelligence

CVE-2022-4259

Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2 PUBLISHED

Description (CNA)

Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.

Affected (CNA)

Vendor / productVersions
Nozomi Networks / CMCaffected 0 before 22.5.2
Nozomi Networks / Guardianaffected 0 before 22.5.2

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.