by Kastro
Paper/Archive/CVE-2020-11597

CVE-2020-11597

mitre — An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 73.9.739 × 2014.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request and inject SQL statements in the user context of the db owner.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcriticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform