Vulnerability Details CVE-2022-4259
Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.8%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2022-4259
-
cpe:2.3:a:nozominetworks:cmc:22.0.0
-
cpe:2.3:a:nozominetworks:guardian:19.0.4
-
cpe:2.3:a:nozominetworks:guardian:22.0.0