2 lines
1.9 KiB
JSON
2 lines
1.9 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Traffic Analysis System","vendor":"UMAI Vision","versions":[{"lessThan":"34","status":"affected","version":"29","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection.\n\nThis issue affects Traffic Analysis System: from 30 before 34."},{"lang":"es","value":"Neutralización incorrecta de elementos especiales utilizados en un comando SQL (vulnerabilidad de ’inyección SQL’) en el Sistema de Análisis de Tráfico UMAI Vision permite la inyección SQL.\n\nEste problema afecta al Sistema de Análisis de Tráfico: desde la versión 30 hasta la 33."}],"id":"CVE-2026-4978","lastModified":"2026-10-23T22:10:00.160","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"iletisim@usom.gov.tr","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-4978","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-07-30T16:10:05.834342Z","version":"2.0.3"}}]},"published":"2026-07-30T16:17:12.933","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0703"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"iletisim@usom.gov.tr","type":"Primary"}]}
|