cbcvebase.

Subex Roc Fraud Management System vulnerabilities

1 known vulnerability affecting subex/roc_fraud_management_system.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2014-8728P3HIGHCVSS 7.5PoC≤ 7.42014-12-02
CVE-2014-8728 [HIGH] CWE-89 CVE-2014-8728: SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System and FMS) 7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ranger_user[name] parameter.
nvd
Subex Roc Fraud Management System vulnerabilities | cvebase