What is CVE-2019-15016?

CVE-2019-15016 is a high-severity vulnerability in Zingbox Inspector, classified under SQL Injection. CVSS score: 8.8/10. Published 2019-10-09.

How severe is CVE-2019-15016?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in Zingbox Inspector

CVE-2019-15016

An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that allows for unsanitized data provided by an authenticated user to be passed from the web UI into the database.

Vulnerability class: SQL Injection

EPSS: 0.012 (63.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Zingbox Inspector
N/a Palo Alto Networks Zingbox Inspector — versions Zingbox Inspector, versions 1.288 and earlier.

Weakness classification (CWE)

CWE-89 — SQL Injection

References

psirt@paloaltonetworks.com (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-15016?: CVE-2019-15016 is a high-severity vulnerability in Zingbox Inspector, classified under SQL Injection. CVSS score: 8.8/10. Published 2019-10-09.
How severe is CVE-2019-15016?: High severity. CVSS v3 base score is 8.8 out of 10.