CVE-2022-4422: SQLi in Bulutdesk Callcenter

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-10 · updated 2026-06-17
Weakness: CWE-89

Description

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0

Affected products

Bulutses Information Technologies Bulutdesk Callcenter: before 3.0 — fixed in 3.0

How to fix

Upgrade to a fixed version: Bulutses Information Technologies Bulutdesk Callcenter 3.0. Check the vendor advisory for mitigations.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747
https://www.usom.gov.tr/bildirim/tr-22-0747
https://www.usom.gov.tr/bildirim/tr-22-0747

Get alerted when CVE-2022-4422 or the next vulnerability affects your stack