CVE-2022-32964

—

CVSS 3.1

9.8 critical

EPSS

1%p70

Published

Aug 4, 2022 (Aug 4, 2022)

Modified

Jun 17, 2026

Description

OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to access, modify, delete database or disrupt service.

Vendors: omicard edm project
Products: omicard edm
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.