CVE-2023-2064

Critical

Published: 24/05/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2023-2064 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in Minova Technology eTrace. This issue affects eTrace versions before 23.05.20.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information or data manipulation. Organizations should be aware of the potential consequences related to data security.

Recommendation

It is recommended to update the eTrace system to a version after 23.05.20 to eliminate this vulnerability. Additionally, conducting a security audit of the application to identify other potential vulnerabilities is advisable.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Minova Technology eTrace allows SQL Injection. This issue affects eTrace: before 23.05.20.