title: SevOne Network Management System Alert Summary sql injection
description: A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.
problem types: CWE-89 SQL Injection
affected:
{
product: Network Management System
vendor: SevOne
versions:
status: affected, version: 5.7.2.0
status: affected, version: 5.7.2.1
status: affected, version: 5.7.2.2
status: affected, version: 5.7.2.3
status: affected, version: 5.7.2.4
status: affected, version: 5.7.2.5
status: affected, version: 5.7.2.6
status: affected, version: 5.7.2.7
status: affected, version: 5.7.2.8
status: affected, version: 5.7.2.9
status: affected, version: 5.7.2.10
status: affected, version: 5.7.2.11
status: affected, version: 5.7.2.12
status: affected, version: 5.7.2.13
status: affected, version: 5.7.2.14
status: affected, version: 5.7.2.15
status: affected, version: 5.7.2.16
status: affected, version: 5.7.2.17
status: affected, version: 5.7.2.18
status: affected, version: 5.7.2.19
status: affected, version: 5.7.2.20
status: affected, version: 5.7.2.21
status: affected, version: 5.7.2.22
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
]