Vulnerabilities > Damstratechnology > Smart Asset > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-10-02 CVE-2020-26527 Origin Validation Error vulnerability in Damstratechnology Smart Asset 2020.7
An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7.
network
low complexity
damstratechnology CWE-346
critical
 9.8
9.8
2020-10-02 CVE-2020-26525 SQL Injection vulnerability in Damstratechnology Smart Asset 2020.7
Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter.
network
low complexity
damstratechnology CWE-89
critical
 9.1
9.1