CVE-2023-27074

CWE-89SQL Injection9 documents4 sources
Severity
9.8CRITICAL
EPSS
0.3%
top 45.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 14
Latest updateSep 24

Description

BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

8
OSV
linux-aws-fips vulnerabilities2025-09-24
OSV
linux-fips, linux-azure-fips, linux-gcp-fips vulnerabilities2025-09-17
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities2025-09-17
OSV
linux-aws vulnerabilities2025-09-02
OSV
linux-fips vulnerabilities2025-08-28
CVE-2023-27074 (CRITICAL CVSS 9.8) | BP Monitoring Management System v1. | cvebase.io