CVE-2015-9249

An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/VersionWebService via a soapenv:Body element.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-01-12

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Skybox Platform (Skyboxsecurity)

References

• https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilit…