A vulnerability, which was classified as very critical, has been found in Commvault CommCell 11.22.22. Affected by this issue is some unknown processing of the component CVSearchService Service. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Commvault CommCell 11.22.22 CVSearchService Service improper authentication
- Virtual Patching
- January 14, 2022
- 1:05 pm
Contact us to get started
CVE-2022-32405 : SOURCECODESTER PRISON MANAGEMENT SYSTEM 1.0 VIEW_PRISON.PHP ID SQL INJECTION
Description Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the ‘id’ parameter at /pms/admin/prisons/view_prison.php:4 References
CVE-2022-20651 : CISCO ADAPTIVE SECURITY DEVICE MANAGER LOG FILE
Description A vulnerability in the logging component of Cisco Adaptive Security Device Manager (ASDM) could allow an authenticated, local attacker
CVE-2022-32549 : APACHE SLING COMMONS LOG/SLING API NEUTRALIZATION FOR LOGS
Description Apache Sling Commons Log