CVE-2017-11471

Critical

Published: 20/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

IDERA Uptime Monitor version 7.8 has an SQL injection vulnerability in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing the confidentiality and integrity of the organization's data.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.