Security Advisory

CVE-2017-9246

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-06-13 18:00:00

Last updated 2024-08-05 17:02:43

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLAN_ALL ON protection mechanism.

← Browse all CVEs View on cve.org ↗