CVE-2022-46501

CriticalCVSS 9.8

Published: 02/03/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

45th percentile - higher than 45% of all known CVEs

Summary

A SQL injection vulnerability was discovered in the E-Mail to Work Order function of Accruent LLC Maintenance Connection 2021 (all versions) and 2022.2. It allows an attacker to manipulate database queries through improperly processed input data.

Risk Assessment

The risk includes unauthorized access to sensitive data, its modification or deletion, and potential system takeover. This could compromise the confidentiality and integrity of organizational data.

Recommendation

Immediately update Maintenance Connection to the latest available version that includes a fix for this vulnerability. Until the update, restrict access to the E-Mail to Work Order function and implement input validation.

Original NVD description (English source)

Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function.