Security Advisory

CVE-2019-17128

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-10-09 15:07:08

Last updated 2024-08-05 01:33:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters and parameter name of the login page through a GET request. The injection allows an attacker to read sensitive information from the database used by the application.

← Browse all CVEs View on cve.org ↗