What’s Vulnerable › Vulnerabilities

CVE-2022-38118: HGiga OAKlouds - SQL Injection

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-30 · updated 2026-06-17
• Weakness: CWE-89

Description

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service.

Affected products

• Hgiga OAKlouds: from 2.0 through 2.0-163; from 3.0 through 3.0-163

References

• https://www.chtsecurity.com/news/0a893178-5c64-4f1c-87f1-95cbf1e17c87
• https://www.twcert.org.tw/tw/cp-132-6461-25c4b-1.html
• https://www.chtsecurity.com/news/0a893178-5c64-4f1c-87f1-95cbf1e17c87
• https://www.twcert.org.tw/tw/cp-132-6461-25c4b-1.html

Get alerted when CVE-2022-38118 or the next vulnerability affects your stack