critical9.8
CVE-2019-16999
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI.
Impact
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idcos | Cloudboot | through 2019-03-08 |