CVE-2017-2241

MEDIUM

Hammock AssetView for MacOS <= 9.2.0 - SQL Injection via File Transfer Web Service

Title source: llm

Description

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://www.hammock.jp/assetview/info/170714.html

Third Party Advisory x_refsource_misc

http://jvn.jp/en/vu/JVNVU93377948/index.html

Scores

CVSS v3 6.3

EPSS 0.0073

EPSS Percentile 50.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-89

Status published

Products (2)

hammock/assetview 9.2

Hammock Corporation/AssetView for MacOS Ver.9.2.0 and earlier versions

Published Jul 17, 2017

Tracked Since Feb 18, 2026