high7.2
CVE-2023-3864
Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with…
Impact
Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snowsoftware | Snow License Manager | from 8.0.0 through 9.30.1 |