CVE-2022-45165

ALTO 8.8CVE-2022-45165 · Published 10/01/2023 · updated 17/06/2026

En resumen

CVE-2022-45165 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a web central (archibus).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.66%, mayor que el 51.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
web central archibus	`= 2022.03.01.107`	No fix yet

Description

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create an SQL query. It causes this service to be prone to SQL injection.

References

cds.thalesgroup.com/en/tcs-cert/CVE-2022-45165
excellium-services.com/cert-xlm-advisory/CVE-2022-45165 · Third Party Advisory

Más vulnerabilidades de web central

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

web central

archibus

= 2022.03.01.107

No fix yet

Más vulnerabilidades de web central

Ver todo →