Net Agent
1 CVEs
product
Monthly
New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
SQLi
Net Agent
New Relic
NVD
CVSS 3.0
9.8
EPSS
0.2%
CVE-2017-9246
NuGet
EPSS 0%
CVSS 9.8
CRITICAL
POC
PATCH
Act Now
New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
SQLi
Net Agent
New Relic
NVD