What’s Vulnerable › Vulnerabilities

CVE-2022-30025

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-24 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection in "/Framewrk/Home.jsp" file (POST method) in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter.

Affected products

• Credenceanalytics Ideal - Wealth And Funds: 1.0

References

• https://gist.github.com/fir3storm/c8a013d1231c22e22835566609620afd
• https://gist.github.com/fir3storm/c8a013d1231c22e22835566609620afd

Get alerted when CVE-2022-30025 or the next vulnerability affects your stack