Vulnerabilities > Idera > Uptime Infrastructure Monitor > 7.8

DATE	CVE	VULNERABILITY TITLE	RISK
2017-07-20	CVE-2017-11471	SQL Injection vulnerability in Idera Uptime Infrastructure Monitor 7.8 IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter. network low complexity idera CWE-89 critical	9.8
2017-07-20	CVE-2017-11470	SQL Injection vulnerability in Idera Uptime Infrastructure Monitor 7.8 IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter. network low complexity idera CWE-89 critical	9.8
2017-07-20	CVE-2017-11469	Path Traversal vulnerability in Idera Uptime Infrastructure Monitor 7.8 get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter. network low complexity idera CWE-22	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.