← Database

CVE-2022-1731

CRITICAL CVSS: 9.8 Published: 2022-05-16 Modified: 2026-06-17

Description

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist.

Affected Platforms

Allgeier Metasonic Doc Webclient

Weakness Type

CWE-89

References