CVE-2017-14807

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and modification of data. This issue affects: SUSE Studio onsite susestudio-ui-server version 1.3.17-56.6.3 and prior versions.

Score

CVSS 3.1 8.1 High

Status

Modified - security@opentext.com

Published

2020-01-27

Last modified

2024-09-17

Weaknesses

CWE-89

Affected products

• Studio Onsite (Suse)
• Susestudio-ui-server (Suse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1065396