CVE-2018-1000631

9.8 criticalEPSS 2.3%

Critical (9.8) in battelle v2i hub. EPSS 2.3% chance of exploitation in the next 30 days.

Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::user_info() function, which could allow the attacker to view, add, modify or delete information in the back-end database.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2018-12-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

battelle:v2i_hub

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/147308
https://exchange.xforce.ibmcloud.com/vulnerabilities/147308

Check your stack JSON