CVE-2019-18646 - The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user

Back Back to CVE browser

HIGH

The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user

Published Nov 14, 2019

7.2

HIGH

CVSS 3.1

EPSS 0.91%

Description

The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (1)

https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 14, 2019

Updated Aug 5, 2024

Reserved Oct 30, 2019

Link CVE-2019-18646

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-18646

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-18646