{"id":"CVE-2022-39069","state":"PUBLISHED","title":"There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploit","description":"There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.","publishedAt":"2022-11-08T00:00:00.000Z","updatedAt":"2025-05-01T14:08:18.523Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"CISA-ADP"},"assigner":"zte","products":["n/a ZAIP-AIE"],"affected":[{"vendor":"n/a","product":"ZAIP-AIE","versions":[{"version":"ZAIP-AIEV8.22.01","status":"affected"}]}],"references":["https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T19:50:29.496Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/39xxx/CVE-2022-39069.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-39069","state":"PUBLISHED","datePublished":"2022-11-08T00:00:00.000Z","dateUpdated":"2025-05-01T14:08:18.523Z","assignerShortName":"zte","assignerOrgId":"6786b568-6808-4982-b61f-398b0d9679eb","dateReserved":"2022-08-31T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content."}],"affected":[{"vendor":"n/a","product":"ZAIP-AIE","versions":[{"version":"ZAIP-AIEV8.22.01","status":"affected"}]}],"references":[{"url":"https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"SQL injection"}]}],"providerMetadata":{"shortName":"zte","orgId":"6786b568-6808-4982-b61f-398b0d9679eb","dateUpdated":"2022-11-08T00:00:00.000Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T11:10:32.457Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-05-01T14:07:23.531635Z","id":"CVE-2022-39069","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","type":"CWE","lang":"en","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-01T14:08:18.523Z"}}]}}}