Archibus vulnerabilities
We track 2 vulnerabilities in Archibus products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 10, 2023.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Archibus vulnerabilities
- 8.8 High severity
Web Central: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create an SQL query. It causes this service to be prone to SQL injection.
- 9.8 Critical severity
Web Central: Improper Neutralization of Special Elements used in an SQL Command
In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Through the injection of arbitrary SQL statements, a potential attacker can modify query syntax and perform unauthorized (and