CVE-2022-2137 MEDIUM

CVE-2022-2137: Advantech iView

Vendor Advantech Iview

Product iView

Weakness CWE-89 · SQLi

Published July 22, 2022

Last update April 16, 2025

View on NVD All CVEs

CVSS base score

4.9/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

The affected product is vulnerable to two SQL injections that require high privileges for exploitation and may allow an unauthorized attacker to disclose information

Key dates

02Disclosure timeline

July 22, 2022 CVE published

April 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2137 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2025-3847 markparticle WebServer Login httprequest.cpp sql injection CVE-2026-9574 itsourcecode Student Transcript Processing System trans.php sql injection CVE-2026-3334 CMS Commander <= 2.288 - Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter CVE-2025-11057 SourceCodester Pet Grooming Management Software print_inv.php sql injection CVE-2024-7195 itsourcecode Society Management System check_admin.php sql injection