CVE-2022-37773

MediumCVSS 6.5

Published: 23/11/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.72%

49th percentile - higher than 49% of all known CVEs

Summary

An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the filter parameter, allows the complete disclosure of all databases.

Risk Assessment

An authenticated attacker can read the entire database contents, leading to exposure of sensitive organizational data.

Recommendation

Immediately update Maarch RM to the latest version and implement parameterized SQL queries for the filter parameter.

Original NVD description (English source)

An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the filter parameter, allows the complete disclosure of all databases.