CVE-2012-1234

SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users...

6.5 Medium

CVE-2012-1234 is a medium vulnerability (CVSS 6.5) in Advantech Webaccess, published February 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.06%, the 64th percentile. No source names a fixed version.

SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a malformed URL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0234.

Exploit likelihood

1.06%Unchanged since Feb 4, 2022

What each source reports

NVD Score used 6.5

Record: CVE-2012-1234
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-1234
Updated: 2026-11-02

EUVDEUVD-2012-1260 No score

Record: EUVD-2012-1260
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4c6w-6x8v-v37h No score

SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users...

Record: GHSA-4c6w-6x8v-v37h
Weakness: CWE-89
Updated: 2026-11-02

Affected products

advantech webaccess

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

Exploit likelihood

What each source reports

Affected products

History

References