Beveiligingsadvies

CVE-2020-27236

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-04-13 14:07:27
Laatst bijgewerkt 2024-08-04 16:11:36
Toegewezen door talos
CVSS-score 6.4
Status PUBLISHED

Beschrijving

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the compnomenclature parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.