CVE-2016-0710

Description

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

79.22

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 5.2.6.3	Windows
Vulnerabilities CVE-2016-0709,CVE-2016-0712,CVE-2016-0710 are fixed in Apache - jetspeed 2.3.1	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234