Skip to content
Sign in
8.1 High

CVE-2017-14807 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in…

Description

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and modification of data. This issue affects: SUSE Studio onsite susestudio-ui-server version 1.3.17-56.6.3 and prior versions.

Affected products and versions

Product Affected versions Fixed in
Studio onsite 1.3 earliest → 1.3.17-56.6.3 No fix stated

Other CVEs of Studio onsite

The 2 CVEs of Studio onsite →
CVE-2017-14806 A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to… 3.7 Low
Track this CVE