← Database

CVE-2022-38619

CRITICAL CVSS: 9.8 Published: 2022-09-21 Modified: 2026-07-09

Description

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /SVFE2/pages/feegroups/mcc_group.jsf.

Affected Platforms

Bpcbt Smartvista Front-End

Weakness Type

CWE-89, CWE-89

References