2 results (0.021 seconds)

CVSS: 6.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-10595

https://notcve.org/view.php?id=CVE-2018-10595

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data. Una vulnerabilidad en ReadA en versiones 1.1.0.2 y anteriores permite que un usuario autorizado con acceso a una cuenta privilegiada en un sistema BD Kiestra (Kiestra TLA, Kiestra WCA y InoqulA+ specimen processor) envíe comandos SQL, lo que podría resultar en una pérdida o corrupción de datos. • https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01 https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CWE-356: Product UI does not Warn User of Unsafe Actions •

CVSS: 5.6EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-10593

https://notcve.org/view.php?id=CVE-2018-10593

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in data corruption. Una vulnerabilidad en DB Manager en versiones 3.0.1.0 y anteriores y PerformA en versiones 3.0.0.0 y anteriores permite que un usuario autorizado con acceso a una cuenta privilegiada en un sistema BD Kiestra (Kiestra TLA, Kiestra WCA y InoqulA+ specimen processor) envíe comandos SQL, lo que podría resultar en una corrupción de datos. • https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01 https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CWE-356: Product UI does not Warn User of Unsafe Actions •