CVE-2019-17128

—

CVSS 3.1

7.5 high

EPSS

2%p78

Published

Oct 9, 2019 (Oct 9, 2019)

Modified

Jun 17, 2026

Description

Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters and parameter name of the login page through a GET request. The injection allows an attacker to read sensitive information from the database used by the application.

Vendors: netreo
Products: omnicenter
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.