CVE-2022-38616

HIGH CVSS: 8.8 Published: 2022-09-13 Modified: 2026-07-09

Description

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /feegroups/tgrt_group.jsf.

Affected Platforms

Bpcbt Smartvista Front-End

Weakness Type

CWE-89

References