CM Informatics

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

CM Informatics records in CISA KEV

No CM Informatics vulnerabilities are listed in CISA KEV.

1 record

TI-2024-11149 CVE-2024-12016 · GHSA-3v3x-mvj6-m5jc

MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CM Informatics CM News allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00434 Published 2025-03-20 No fix listed CWE-89