Vulnerability in Baxter Connex Health Portal

In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database.  An attacker could have submitted a crafted payload to Connex portal that could have resulted in modification and disclosure of database content and/or perform administrative operations including shutting down the database.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

Baxter Connex Health Portal 安全漏洞

Baxter Connex Health Portal是美国百特（Baxter）公司的一个医疗仪器的门户网站。 Baxter Connex Health Portal存在安全漏洞，该漏洞源于包含一个SQL注入漏洞，可能允许未经身份验证的攻击者获得对 Connex 门户数据库的未经授权的访问。

N/A

N/A