CVE-2023-29863

CRITICAL 9.8CVE-2023-29863 · Published 11/05/2023 · updated 09/07/2026

In short

CVE-2023-29863 is a CRITICAL (CVSS 9.8) vulnerability affecting weblab (medisys).
Chance of exploitation in the next 30 days (EPSS): 0.88%, higher than 59.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
weblab medisys	`= 19.4.03`	No fix yet

Description

Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL files.

References

medium.com/@waadalbyalii5/sql-injection-in-wsdl-file-c66fa00042f5
medium.com/%40waadalbyalii5/sql-injection-in-wsdl-file-c66fa00042f5

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free