by Kastro
Paper/Archive/CVE-2022-4422

CVE-2022-4422

Bulutses Information Technologies Bulutdesk Callcenter — SQLi in Bulutdesk Callcenter

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 50.6.506 × 2010.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0

Affected

ProductAffectedFixed inSource
Bulutdesk Callcenter< 3.03.0CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-22-0747refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747