CVE-2022-4259

Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.

Score

CVSS 3.1 8.8 High

Status

Modified - prodsec@nozominetworks.com

Published

2023-05-04

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Cmc (Nozomi Networks)
• Guardian (Nozomi Networks)
• Cmc (Nozominetworks)
• Guardian (Nozominetworks)

References

• https://security.nozominetworks.com/NN-2023:1-01