CVE-2024-33009

MEDIUM Year: 2024
CVSS v3 Score
4.2
Medium
Weakness Type
CWE-89
View all →

Vulnerability Description

SAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted inputs to modify database commands resulting in the retrieval of additional information persisted by the system. This could lead to low impact on Confidentiality and Integrity of the application.

Related Vulnerabilities

CVE-2022-22413

MEDIUM
CVSS:4.2(Medium)

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, mo...

CWE-892022

CVE-2024-33501

MEDIUM
CVSS:4.2(Medium)

Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5, FortiManager ver...

CWE-892024

CVE-2024-55159

MEDIUM
CVSS:4.2(Medium)

GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the SortName parameter at /system/loginLog/list.

CWE-892024

CVE-2015-7784

MEDIUM
CVSS:4.3(Medium)

SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitra...

CWE-892015

CVE-2017-12302

MEDIUM
CVSS:4.3(Medium)

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL ...

CWE-892017

CVE-2017-15546

MEDIUM
CVSS:4.3(Medium)

The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability. Authenticated malicious users could potentially exploit this vulnerabi...

CWE-892017