CVE-2022-44016

概要

参考情報

• sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager · Exploit

lieferantenmanager のその他の脆弱性

• CVE-2022-44017高 7.5An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victi…
• CVE-2022-44015緊急 9.8An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL queries. By activating MSSQL features, the …
• CVE-2022-44014中 6.5An issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a user is inherently able to fetch arbitrary SQL…
• CVE-2022-44013緊急 9.1An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can make various API calls without authentication because the …
• CVE-2022-44012中 5.4An issue was discovered in /DS/LM_API/api/SelectionService/InsertQueryWithActiveRelationsReturnId in Simmeth Lieferantenmanager before 5.6. …