← Database

CVE-2022-38618

HIGH CVSS: 8.8 Published: 2022-09-19 Modified: 2026-07-09

Description

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id88, UserForm:j_id90, and UserForm:j_id92 parameters at /SVFE2/pages/feegroups/country_group.jsf.

Affected Platforms

Bpcbt Smartvista

Weakness Type

CWE-89

References