CVE-2022-45165: SQL Injection

Published Jan 10, 2023

Updated

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create an SQL query. It causes this service to be prone to SQL injection.

Affected Software

1 affected component

Archibus Web Central=2022.03.01.107

Event History

Jan 10, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-45165?

CVE-2022-45165 is classified as a high severity vulnerability due to its potential for SQL injection.

How do I fix CVE-2022-45165?

To fix CVE-2022-45165, update Archibus Web Central to the latest version that addresses this SQL injection vulnerability.

What are the consequences of exploiting CVE-2022-45165?

Exploitation of CVE-2022-45165 could allow an attacker to execute arbitrary SQL commands, potentially compromising database integrity and confidentiality.

Which versions of Archibus Web Central are affected by CVE-2022-45165?

CVE-2022-45165 affects Archibus Web Central version 2022.03.01.107.

How can I tell if my system is vulnerable to CVE-2022-45165?

If your system runs Archibus Web Central version 2022.03.01.107, it is vulnerable to CVE-2022-45165 and should be updated immediately.