← Database

CVE-2022-45165

MEDIUM CVSS: 6.5 Published: 2023-01-10 Modified: 2026-06-17

Description

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create an SQL query. It causes this service to be prone to SQL injection.

Affected Platforms

Archibus Web Central

Weakness Type

CWE-89, CWE-89

References