Universis

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Universis records in CISA KEV

No Universis vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Universis-api · all components

TI-2022-12038 CVE-2022-29603 · GHSA-xr76-xjjc-j8mg

LOW 38

A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API endpoints.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01449 Published 2022-04-25 No fix listed CWE-89