TI-2022-01983 CVE-2022-2142 · GHSA-gr2v-jw76-jf4q
SQL injection in Advantech iView
Priority LOW 39
The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information.
Vulnerabilities
7 records
TI-2022-01984 CVE-2022-2143 · GHSA-4w4w-jrgw-jr5h
Command injection in Advantech iView
Priority HIGH 84
The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.
TI-2022-01977 CVE-2022-2136 · GHSA-3cvh-w666-7794
SQL injection in Advantech iView
Priority MEDIUM 52
The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized attacker to disclose information.
TI-2022-01976 CVE-2022-2135 · GHSA-p352-52vf-m6c4
SQL injection in Advantech iView
Priority MEDIUM 52
The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.
TI-2022-01979 CVE-2022-2138 · GHSA-jp6v-rq8g-2cjf
Missing authentication in Advantech iView
Priority MEDIUM 55
The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute arbitrary code, resulting in a denial-of-service condition.
TI-2022-01980 CVE-2022-2139 · GHSA-72gc-6xcf-q52m
Path traversal in Advantech iView
Priority MEDIUM 58
The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code.
TI-2022-01978 CVE-2022-2137 · GHSA-3hh5-x5h6-6vjx
SQL injection in Advantech iView
Priority LOW 24
The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an unauthorized attacker to disclose information