critical9.8
CVE-2022-1731
Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field.
Impact
Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allgeier | Metasonic Doc Webclient | Versions 7.0.3.0, 7.0.12.0, 7.0.14.0 |