CVE-2022-4093
CVSS v3
9.8
CRITICAL
EPSS Score
4.2 %
exploit probability, as of 2026-09-25
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In some cases, an attacker can obtain a persistent backdoor into an organization's systems, leading to a long-term compromise that can go unnoticed for an extended period. This affect 16.0.1 and 16.0.2 only. 16.0.0 or lower, and 16.0.3 or higher are not affected
Technical details
- Published
- 2022-11-21
Frequently asked questions
What is CVE-2022-4093?
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In some cases, an attacker can obtain a persistent backdoor into an organization's systems, leading to a long-term compromise that can go unnoticed for an extended period. This affect 16.0.1 and 16.0.2 only. 16.0.0 or lower, and 16.0.3 or higher are not affected
Is CVE-2022-4093 actively exploited?
Active exploitation of CVE-2022-4093 has not been confirmed. Its EPSS score was 4.2% on 2026-09-25, the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2022-4093?
CVE-2022-4093 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2022-4093 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2022 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).