DevSecOps Toolkit

CVE record

CVE-2023-4671

CRITICALCVSS 9.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255.

Vulnerability metadata

Published
2023-12-28T04:45:08.043Z
Modified
2026-05-21T03:46:23.900Z
EPSS
Not available
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References