CVE-2023-37197

Publication date

2023-07-12 06:41:30

Family

schneider

State

PUBLISHED

Description

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command (SQL Injection) vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the mass configuration settings of endpoints on DCE.