CVEDB API

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.02

EPSS Ranking 83.1%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 5.0

References

Products affected by CVE-2017-3221

Inmarsat » Amosconnect 8 » Version: 8.0

cpe:2.3:a:inmarsat:amosconnect_8:8.0
Inmarsat » Amosconnect 8 » Version: 8.0.1

cpe:2.3:a:inmarsat:amosconnect_8:8.0.1
Inmarsat » Amosconnect 8 » Version: 8.0.2

cpe:2.3:a:inmarsat:amosconnect_8:8.0.2
Inmarsat » Amosconnect 8 » Version: 8.2.0

cpe:2.3:a:inmarsat:amosconnect_8:8.2.0
Inmarsat » Amosconnect 8 » Version: 8.2.1

cpe:2.3:a:inmarsat:amosconnect_8:8.2.1
Inmarsat » Amosconnect 8 » Version: 8.2.2

cpe:2.3:a:inmarsat:amosconnect_8:8.2.2
Inmarsat » Amosconnect 8 » Version: 8.3.0

cpe:2.3:a:inmarsat:amosconnect_8:8.3.0
Inmarsat » Amosconnect 8 » Version: 8.3.1

cpe:2.3:a:inmarsat:amosconnect_8:8.3.1
Inmarsat » Amosconnect 8 » Version: 8.4.0

cpe:2.3:a:inmarsat:amosconnect_8:8.4.0
Inmarsat » Amosconnect 8 » Version: 8.4.0.1

cpe:2.3:a:inmarsat:amosconnect_8:8.4.0.1