CVE-2022-47072: SQL Injection

Published Jan 31, 2024

Updated

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box..

Affected Software

1 affected component

Sparxsystems Enterprise Architect=16.0.1605

Event History

Jan 31, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The vulnerability is rated with network attack vector, low attack complexity, no privileges required, and no user interaction required. It can allow arbitrary SQL commands through the Find parameter in the Select Classifier dialog box.

Which product version is identified as affected?

The reported affected version is Sparxsystems Enterprise Architect 16.0.1605 32-bit.

What is the potential impact if exploitation succeeds?

The CVSS vector indicates high impact to confidentiality, integrity, and availability. Successful exploitation may allow an attacker to execute arbitrary SQL commands.

CVE-2022-47072: SQL Injection

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which product version is identified as affected?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which product version is identified as affected?

What is the potential impact if exploitation succeeds?