← Database

CVE-2022-32964

CRITICAL CVSS: 9.8 Published: 2022-08-04 Modified: 2026-06-17

Description

OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to access, modify, delete database or disrupt service.

Affected Platforms

Omicard Edm Project Omicard Edm

Weakness Type

CWE-89, CWE-89

References