CVE-2023-22378

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application.

Authenticated users may be able to extract arbitrary information from the DBMS in an uncontrolled way, alter its structure and data, and/or affect its availability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Aug 9, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-223795.5Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information d CVE-2023-223806.5A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages s CVE-2023-223818.8A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment variables from a single CVE-2023-223828.2Weak configuration in Automotive while VM is processing a listener request from TEE.CVE-2023-223837.8Memory Corruption in camera while installing a fd for a particular DMA buffer.CVE-2023-223847.8Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).CVE-2023-223859.8Memory Corruption in Data Modem while making a MO call or MT VOLTE call.CVE-2023-223867.8Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.CVE-2023-223877.8Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.CVE-2023-223889.8Memory Corruption in Multi-mode Call Processor while processing bit mask API.CVE-2023-223896.5Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via CVE-2023-22396.5Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4.