Skip to main content

Security Center CVE-2023-1522

HIGH
SQL Injection (CWE-89)
2023-04-05 security@genetec.com
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Apr 05, 2023 - 19:15 nvd
HIGH 8.8

DescriptionNVD

SQL Injection in the Hardware Inventory report of Security Center 5.11.2.

AnalysisAI

SQL Injection in the Hardware Inventory report of Security Center 5.11.2. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. SQL Injection in the Hardware Inventory report of Security Center 5.11.2. Affected products include: Genetec Security Center.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.

CVE-2026-19681 CRITICAL POC
9.4 Aug 14

Authenticated OS command injection in Tenable Security Center allows a low-privileged user to run arbitrary operating sy

CVE-2026-19626 CRITICAL POC
9.4 Aug 14

Remote code execution in Tenable Security Center's report-generation subsystem allows an authenticated, non-administrati

CVE-2026-64879 CRITICAL
9.4 Jul 21

OS command injection in Tenable Security Center (Tenable.sc) lets an authenticated attacker execute arbitrary shell comm

CVE-2026-19682 CRITICAL
9.4 Aug 14

OS command injection in Tenable Security Center (formerly Tenable.sc) lets a remote attacker run arbitrary operating-sys

CVE-2026-64878 CRITICAL
9.4 Jul 21

Authenticated remote code execution in Tenable Security Center allows an attacker to inject shell metacharacters through

CVE-2026-64877 CRITICAL
9.4 Jul 21

SQL injection in the ticketing REST API of Tenable Security Center (versions before 6.8.0) allows an authenticated non-a

CVE-2026-19679 HIGH
8.7 Aug 14

Command injection in Tenable Security Center's file upload handler allows an authenticated low-privilege network attacke

CVE-2026-19628 HIGH
8.6 Aug 14

Command injection in Tenable Security Center enables an authenticated administrator to achieve arbitrary OS command exec

CVE-2026-64881 HIGH
8.7 Jul 21

OS command injection in Tenable Security Center (formerly Tenable.sc) lets authenticated users abuse the audit file uplo

CVE-2026-19629 HIGH
8.6 Aug 14

Privilege escalation in Tenable Security Center allows an authenticated Security Manager to manage users outside their a

CVE-2026-19635 HIGH
8.5 Aug 14

Command injection (CWE-78) in Tenable Security Center versions prior to 6.9.0 enables a local attacker with write access

CVE-2020-25045 HIGH
7.8 Sep 02

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were

Share

CVE-2023-1522 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy