EBM Technologies vulnerabilities
We track 4 vulnerabilities in EBM Technologies products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2025.
Latest EBM Technologies vulnerabilities
- 8.8 High severity
EBM Maintenance Center: Improper Neutralization of Special Elements used in an SQL Command
EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.
- 9.8 Critical severity
RISWEB: Improper Neutralization of Special Elements used in an SQL Command
EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attackers to inject SQL commands without authentication, enabling them to read, modify, and
- 7.5 High severity
RISWEB: Missing Authentication for Critical Functionality
EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login.
- 8.8 High severity
Uniweb/SoliPACS WebServer: Improper Neutralization of Special Elements used in an SQL Command
EBM Technologies Uniweb/SoliPACS WebServer's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing