CVSS v3
9.8
CRITICAL
EPSS Score
72.7%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user.
SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user.
Active exploitation of CVE-2019-10123 has not been confirmed. The EPSS score is 72.7%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2019-10123 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).