Vulnerabilities > Hikvision > Hikcentral Professional

DATE CVE VULNERABILITY TITLE RISK
2024-10-18 CVE-2024-47487 SQL Injection vulnerability in Hikvision Hikcentral Professional 2.0.0/2.5.1
There is a SQL injection vulnerability in some HikCentral Professional versions.
network
low complexity
hikvision CWE-89
8.8
2024-03-02 CVE-2024-25063 Unspecified vulnerability in Hikvision Hikcentral Professional 2.0.0/2.5.1
Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have access to.
network
low complexity
hikvision
7.5
2024-03-02 CVE-2024-25064 Unspecified vulnerability in Hikvision Hikcentral Professional 2.0.0
Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values.
network
low complexity
hikvision
4.3