CVE-2022-32456: Data Systems Consulting Co., Ltd. BPM - SQL Injection
Published Jul 20, 2022
·Updated
Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delete database or disrupt service.
Affected Software
1 affected component
Digiwin Business Process Management<5.8.8.1
Remediation
Information
Update version to 5.8.8.1
Event History
Jul 20, 2022
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-32456?
CVE-2022-32456 is rated as high severity due to its potential for unauthorized database access and manipulation.
2
How do I fix CVE-2022-32456?
To fix CVE-2022-32456, upgrade Digiwin Business Process Management to version 5.8.8.1 or later.
3
Who is affected by CVE-2022-32456?
Organizations using Digiwin Business Process Management versions before 5.8.8.1 are at risk from CVE-2022-32456.
4
What type of attack does CVE-2022-32456 allow?
CVE-2022-32456 allows unauthenticated remote attackers to perform SQL injection attacks.
5
What impact can CVE-2022-32456 have on my system?
CVE-2022-32456 can lead to database access, modification, deletion, or even service disruption.