CVE-2023-3864 — SQL injection vulnerability in Snow License Manager

CVE-2023-3864

SQL injection vulnerability in Snow License Manager PUBLISHED

Description (CNA)

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal.

Affected (CNA)

Vendor / product	Versions
Snow Software / SLM	affected 8.0.0 through 9.30.1

CWE

CWE-89

References

https://community.snowsoftware.com/s/feed/0D56M00009gUexuSAC

ADP enrichment

CVE

No English description supplied.

https://community.snowsoftware.com/s/feed/0D56M00009gUexuSAC

CISA-ADP

No English description supplied.

No references supplied.