cbcvebase.

Cerner Mobile Care vulnerabilities

1 known vulnerability affecting cerner/mobile_care.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2021-36385P2CRITICALCVSS 9.8v5.0.02021-08-24
CVE-2021-36385 [CRITICAL] CWE-89 CVE-2021-36385: A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via a Fullwidth Apostrophe (aka U+FF07) in the default.aspx User ID field. Arbitrary system commands can be executed through the use of xp_cmdshell.
nvd
Cerner Mobile Care vulnerabilities | cvebase