Vulnerabilities

Summary — last 7 days

New vulnerabilities3,414▲ 284 vs. last week
Critical / high1,395▲ 147 vs. last week
New active exploitation (KEV)5▼ 3 vs. last week
Unscored (no CVSS)768▲ 288 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedCritical (9.8)4.0%ExploitKinsey Infor-lawson3/20/20176/16/2026
Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData.