CVE-2023-46807 Vulnerability Details

  /     /     /  

CVE-2023-46807 Metadata Quick Info

CVE Published: 22/05/2024 | CVE Updated: 02/08/2024 | CVE Year: 2023
Source: hackerone | Vendor: Ivanti | Product: EPMM
Status : PUBLISHED

---

CVE-2023-46807 Description

An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the underlying database.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name:
Source: Ivanti

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).