Server vulnerabilities

2 known vulnerabilities in Server from TrueConf. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  TrueConf Server: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-46764Dec 27, 2022TrueConfEPSS 2.32%

  A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution.

• 8.8 High severity

  TrueConf Server: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-46763Dec 27, 2022TrueConfEPSS 1.16%

  A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.