First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-2135

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Advantech iView	iView	>= All, < 5_7_04_6469

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03Third Party Advisory, US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-03Third Party Advisory, US Government Resource

Timeline

Published: Jul 22, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-213506.5Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are CVE-2022-213517.1Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 an CVE-2022-213525.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.26 and prior. Di CVE-2022-213536.5Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are CVE-2022-213546.1Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are CVE-2022-213552.9Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 an CVE-2022-213566.3Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 an CVE-2022-213572.9Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 an CVE-2022-213586.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected ar CVE-2022-213596.1Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Optimization Framework). Supported versions CVE-2022-21366.5The affected product is vulnerable to multiple SQL injections that require low privileges for exploitation and may allow an unauthorized att CVE-2022-213605.3Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions th