CVE-2022-4422

SQLi in Bulutdesk Callcenter

CVSS 9.8 CRITICALEPSS 0.6%CWE-89

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.8EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 ene 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Bulutses Information Technologies · Bulutdesk Callcenter

Referencias

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747 https://www.usom.gov.tr/bildirim/tr-22-0747