CVE-2022-4422

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0
References
Link Resource
https://www.usom.gov.tr/bildirim/tr-22-0747 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:bulutses:bulutdesk_callcenter:*:*:*:*:*:*:*:*

History

16 Apr 2023, 09:15

Type Values Removed Values Added
Summary Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0 Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0

08 Mar 2023, 14:15

Type Values Removed Values Added
Summary This issue affects: Bulutses Bilgi Teknolojileri LTD. ?T?. BULUTDESK CALLCENTER versions prior to 3.0. Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0

14 Jan 2023, 03:51

Type Values Removed Values Added
CPE cpe:2.3:a:bulutses:bulutdesk_callcenter:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
First Time Bulutses bulutdesk Callcenter
Bulutses
References (CONFIRM) https://www.usom.gov.tr/bildirim/tr-22-0747 - (CONFIRM) https://www.usom.gov.tr/bildirim/tr-22-0747 - Third Party Advisory
CWE CWE-89

10 Jan 2023, 15:15

Type Values Removed Values Added
Summary This issue affects: Bulutses Bilgi Teknolojileri LTD. ÅžTÄ°. BULUTDESK CALLCENTER versions prior to 3.0. This issue affects: Bulutses Bilgi Teknolojileri LTD. ?T?. BULUTDESK CALLCENTER versions prior to 3.0.

10 Jan 2023, 14:59

Type Values Removed Values Added
New CVE

Information

Published : 2023-01-10 14:15

Updated : 2023-12-10 14:48


NVD link : CVE-2022-4422

Mitre link : CVE-2022-4422

CVE.ORG link : CVE-2022-4422


JSON object : View

Products Affected

bulutses

  • bulutdesk_callcenter
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')