CVE-2022-48603

HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-08-09

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.

Affected Platforms (CPE)

📦

Sciencelogic

Sl1

<= 11.1.2

References & Advisories

🔗 https://www.securifera.com/advisories/cve-2022-48603/

関連する脆弱性情報

CVE-2025-587807.2

index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Suppl...

CVE-2024-95379.3

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component package...

CVE-2022-486048.8

A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlle...

CVE-2022-486028.8

A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐con...