Web Central vulnerabilities

2 known vulnerabilities in Web Central from Archibus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Web Central: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-45165Jan 10, 2023Archibus

  An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create an SQL query. It causes this service to be prone to SQL injection.

• 9.8 Critical severity

  Web Central: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-28862May 25, 2022ArchibusEPSS 1.06%

  In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Through the injection of arbitrary SQL statements, a potential attacker can modify query syntax and perform unauthorized (and