CVE-2019-16999
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI.
CVSS 3.1 · 9.8 Critical
EPSS 1.5%
KEV · Not listed
Vendors
Products