VULNERABILITY INTELLIGENCE

CVE-2022-48586

CVSS score8.8 HIGH

EPSS probability0.73%

CISA KEVNot currently listed

Published2023-08-09

Last modified2026-06-17

Description

A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.