What is CVE-2023-45162?

CVE-2023-45162 is a critical-severity vulnerability in 1e Platform, classified under SQL Injection. CVSS score: 9.9/10. Published 2023-10-13.

How severe is CVE-2023-45162?

Critical severity. CVSS v3 base score is 9.9 out of 10.

SQL Injection in 1e Platform

CVE-2023-45162

Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution. Application of the relevant hotfix remediates this issue. for v8.1.2 apply hotfix Q23166 for v8.4.1 apply hotfix Q23164 fo…

Vulnerability class: SQL Injection

EPSS: 0.006 (46.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

1e Platform — versions 0
1e Platform — versions 8.1.2, 8.4.1, 9.0.1

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security@1e.com
af854a3a-2127-422b-91ae-364da2661108 (Vendor Advisory)

Frequently asked questions

What is CVE-2023-45162?: CVE-2023-45162 is a critical-severity vulnerability in 1e Platform, classified under SQL Injection. CVSS score: 9.9/10. Published 2023-10-13.
How severe is CVE-2023-45162?: Critical severity. CVSS v3 base score is 9.9 out of 10.