Vulnerabilities > Idera > Uptime Infrastructure Monitor > 7.8

DATE CVE VULNERABILITY TITLE RISK
2017-07-20 CVE-2017-11471 SQL Injection vulnerability in Idera Uptime Infrastructure Monitor 7.8
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.
network
low complexity
idera CWE-89
7.5
2017-07-20 CVE-2017-11470 SQL Injection vulnerability in Idera Uptime Infrastructure Monitor 7.8
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.
network
low complexity
idera CWE-89
7.5
2017-07-20 CVE-2017-11469 Path Traversal vulnerability in Idera Uptime Infrastructure Monitor 7.8
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
network
low complexity
idera CWE-22
5.0