NetSight
critical9.8

CVE-2022-22280

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Ho…

Impact

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-Prem 2.5.0.3-2520 and earlier versions.

Affected products

VendorProductAffected versions
SonicwallAnalytics
through 2.5.0.3-2520
SonicwallGlobal Management System
before 9.3.1
Version 9.3.1

Weakness classification

References