Bpcbt Smartvista vulnerabilities

• bpcbt smartvista front-end SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm... CVE-2022-38619 9.8 CriticalSeptember 20, 2022
• bpcbt smartvista SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm... CVE-2022-38618 8.8 HighSeptember 19, 2022
• bpcbt smartvista SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the... CVE-2022-38617 8.8 HighSeptember 19, 2022
• bpcbt smartvista front-end SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm... CVE-2022-38616 8.8 HighSeptember 13, 2022
• bpcbt smartvista cardgen An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows... CVE-2022-38614 7.5 HighSeptember 9, 2022
• bpcbt smartvista front-end SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the... CVE-2022-38615 8.8 HighSeptember 9, 2022
• bpcbt smartvista cardgen A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to... CVE-2022-38613 6.5 MediumSeptember 9, 2022
• bpcbt smartvista Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista... CVE-2022-35554 6.1 MediumAugust 19, 2022
• bpcbt smartvista BPC SmartVista 2 has Session Fixation via the JSESSIONID parameter. CVE-2018-15208 7.5 HighApril 30, 2019
• bpcbt smartvista BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately... CVE-2018-15207 7.2 HighApril 30, 2019
• bpcbt smartvista BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf. CVE-2018-15206 8.8 HighApril 30, 2019