CVE-2022-4259

No fix known EPSS <1%CVSS 8.8

Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.

Published 2023-05-04 · CVE record · OSV

Products: Nozomi Networks CMC, Nozomi Networks Guardian, nozominetworks cmc, nozominetworks guardian