COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2022-24240

CVE-2022-24240

Severity
critical
Source
NVD · cve
Published
2022-06-02
CVSS
9.8
Reference
https://nvd.nist.gov/vuln/detail/CVE-2022-24240
shame 35/100

ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp.

Players implicated

aceware · vendoraceweb online portal · product

Description

ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.