CVE-2023-29863

CriticalCVSS 9.8

Published: 11/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.87%

55th percentile - higher than 55% of all known CVEs

Summary

Medical Systems Co. Medisys Weblab Products v19.4.03 contains a SQL injection vulnerability. The flaw exists in the WSDL files via the tem:statement parameter.

Risk Assessment

An attacker can exploit this vulnerability to gain unauthorized access to the database, potentially stealing or modifying sensitive medical data.

Recommendation

Immediately update Medisys Weblab to the latest version and implement parameterized SQL queries in the WSDL files.

Original NVD description (English source)

Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL files.