5.1
Medium
CVE-2026-13337 CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the…
Description
CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the NetBotz via the web-service interface or webui.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NetBotz 5 - 750/755 | Versions not published |