CVE-2023-46807: SQL Injection
Published May 22, 2024
·Updated
An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the underlying database.
Affected Software
2 affected components
Ivanti Endpoint Manager Mobile<12.1.0.0
Oracle Enterprise Performance Management Cloud<12.1.0.0
Event History
May 22, 2024
CVE Published
via MITRE·10:55 PM
Data Sourced
via MITRE·10:55 PM
DescriptionSeverity
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-46807?
CVE-2023-46807 is considered a critical SQL Injection vulnerability that allows unauthorized access to the database.
2
How do I fix CVE-2023-46807?
To mitigate CVE-2023-46807, upgrade Oracle Enterprise Performance Management Cloud to version 12.1.0.0 or later.
3
Who is affected by CVE-2023-46807?
CVE-2023-46807 affects users of Oracle Enterprise Performance Management Cloud versions prior to 12.1.0.0.
4
What type of vulnerability is CVE-2023-46807?
CVE-2023-46807 is an SQL Injection vulnerability that can lead to unauthorized database access.
5
Can an authenticated user exploit CVE-2023-46807?
Yes, an authenticated user with the appropriate privileges can exploit CVE-2023-46807 to access or modify database data.