Vulnerability · Published May 17, 2024 · Assigned by OpenText
CVE-2021-22508Potential SQL injection in OpenText Operations Bridge Reporter
High 7.2
In plain English
A high-severity improper input validation in Operations Bridge Reporter from OpenText. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.4%top 62.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A potential vulnerability has been identified for OpenText Operations Bridge Reporter. The vulnerability could be exploited to inject malicious SQL queries. An attack requires to be an authenticated administrator of OBR with network access to the OBR web application.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenText | Operations Bridge Reporter | 0 – through 10.50 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H