Security Advisory

CVE-2017-10937

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-07-25 15:00:00

Last updated 2024-09-17 00:55:35

Assigner zte

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information.

← Browse all CVEs View on cve.org ↗