CVE-2018-8802
HIGHUnisys ClearPath ePortal Manager < 17.0a.31 and ePortal-2200 < 2.2.81 - SQL Injection
Title source: llmDescription
SQL injection vulnerability in the management interface in ePortal Manager allows remote attackers to execute arbitrary SQL commands via unspecified parameters.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=49
Scores
CVSS v3
8.1
EPSS
0.0095
EPSS Percentile
57.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (2)
unisys/clearpath_eportal_manager
< 17.0a.31
unisys/eportal-2200
< 2.2.81
Published
Mar 26, 2018
Tracked Since
Feb 18, 2026