Wapt
Monthly
SQL injection in WAPT Server's GET /api/v3/hosts REST API endpoint allows any remote authenticated user with read-only privileges to inject arbitrary PostgreSQL expressions via the `columns` query parameter, bypassing host-scope access controls and exfiltrating data from tables beyond the user's authorized scope. Versions 2.6.1.17834 and earlier are confirmed affected per CPE cpe:2.3:a:tranquil_it:wapt. No public exploit code or CISA KEV listing is identified at time of analysis, but the low attack complexity and minimal privilege requirement make this a realistic internal threat for any WAPT deployment; a vendor patch is available.
Incorrect Access Control in Tranquil WAPT Enterprise - before 1.8.2.7373 and before 2.0.0.9450 allows guest OS users to escalate privileges via WAPT Agent. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
SQL injection in WAPT Server's GET /api/v3/hosts REST API endpoint allows any remote authenticated user with read-only privileges to inject arbitrary PostgreSQL expressions via the `columns` query parameter, bypassing host-scope access controls and exfiltrating data from tables beyond the user's authorized scope. Versions 2.6.1.17834 and earlier are confirmed affected per CPE cpe:2.3:a:tranquil_it:wapt. No public exploit code or CISA KEV listing is identified at time of analysis, but the low attack complexity and minimal privilege requirement make this a realistic internal threat for any WAPT deployment; a vendor patch is available.
Incorrect Access Control in Tranquil WAPT Enterprise - before 1.8.2.7373 and before 2.0.0.9450 allows guest OS users to escalate privileges via WAPT Agent. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.