Vulnerabilities

TI-2022-18172 CVE-2022-38619 · GHSA-x8p4-gq9j-2qj7

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the…

HIGH 82

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /SVFE2/pages/feegroups/mcc_group.jsf.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00922 Published 2022-09-20 No fix listed CWE-89

TI-2022-18169 CVE-2022-38616 · GHSA-7h2g-gmgp-wxw8

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 40

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /feegroups/tgrt_group.jsf.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00908 Published 2022-09-13 No fix listed CWE-89

TI-2022-18168 CVE-2022-38615 · GHSA-mcqw-chfj-8m42

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities…

MEDIUM 40

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/service_group.jsf.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00945 Published 2022-09-09 No fix listed CWE-89

Vulnerabilities

Filters

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the…

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the…

SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities…