CVE-2022-39041: aEnrich a+HRD - SQL Injection
Published Jan 3, 2023
·Updated
aEnrich a+HRD has insufficient user input validation for specific API parameter. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.
Affected Software
2 affected components
aEnrich A\+hrd=6.8
aEnrich A\+hrd=7.0
Event History
Jan 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-39041?
CVE-2022-39041 is classified as a critical severity vulnerability due to the potential for unauthorized database access and manipulation.
2
How can I fix CVE-2022-39041?
To fix CVE-2022-39041, ensure proper user input validation and parameterized queries are implemented in your application.
3
Which software versions are affected by CVE-2022-39041?
CVE-2022-39041 affects AEnrich a+HRD versions 6.8 and 7.0.
4
What type of attack can be performed using CVE-2022-39041?
An unauthenticated remote attacker can exploit CVE-2022-39041 to perform SQL injection attacks.
5
Who can exploit CVE-2022-39041?
CVE-2022-39041 can be exploited by any unauthenticated remote attacker without any prior access.