What is CVE-2022-28623?

CVE-2022-28623 is a critical-severity vulnerability in Hp Hp-ux, classified under SQL Injection. CVSS score: 9.8/10. Published 2022-07-08.

How severe is CVE-2022-28623?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Hp Hp-ux

CVE-2022-28623

Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO vers…

Vulnerability class: SQL Injection

EPSS: 0.008 (53.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hp Hp-ux
Hpe Icewall_sso_certd — versions 10.0
Redhat Enterprise_linux
N/a Hpe Icewall Sso — versions Prior to HPE IceWall SSO certd 10.0 (RHEL and HP-UX)

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-28623?: CVE-2022-28623 is a critical-severity vulnerability in Hp Hp-ux, classified under SQL Injection. CVSS score: 9.8/10. Published 2022-07-08.
How severe is CVE-2022-28623?: Critical severity. CVSS v3 base score is 9.8 out of 10.