CVE-2022-38619

CRITICAL 9.8CVE-2022-38619 · Published 21/09/2022 · updated 09/07/2026

In short

CVE-2022-38619 is a CRITICAL (CVSS 9.8) vulnerability affecting smartvista front-end (bpcbt).
Chance of exploitation in the next 30 days (EPSS): 0.92%, higher than 60.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
smartvista front-end bpcbt	`= 2.2.22`	No fix yet

Description

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /SVFE2/pages/feegroups/mcc_group.jsf.

References

dtro.gitbook.io/note_cve/sql-injection-in-terminal-mcc-group-feature-of-smartvista-svfe2-version-2.2.22-cve-2022-38619 · Exploit

More vulnerabilities in smartvista front-end

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free