CVE-2017-11470
CriticalSummary
IDERA Uptime Monitor version 7.8 has an SQL injection vulnerability in getxenmetrics.php via the element parameter.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the confidentiality and integrity of the organization's data.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor logs for potential attacks.
Other vulnerabilities in IDERA Uptime Monitor 7.8
See all- CVE-2017-11469High
The get2post.php file in IDERA Uptime Monitor 7.8 has a directory traversal vulnerability in the file_name parameter.
- CVE-2017-11471Critical
IDERA Uptime Monitor version 7.8 has an SQL injection vulnerability in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.
Original NVD description (English source)
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.