CVE-2020-12507

Katalog CVE

CVSS 8.8 · High EPSS 0,75%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada badgermeter moni. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.

Rincian

Terbit di NVD

15 November 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

EPSS (30 hari)

0,75% peluang dieksploitasi; lebih tinggi dari 53,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.s-can.at/en/the-new-monitool-v4-2-security-first/ advisory vendor