CVE-2022-45165

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create an SQL query. It causes this service to be prone to SQL injection.

• CWE-89
• CWE-89

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-45165
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-45165/Third Party Advisory
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-45165/Third Party Advisory

Published

Jan 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45154A Cleartext Storage of Sensitive Information vulnerability i…5.5
• CVE-2022-45155An Improper Handling of Exceptional Conditions vulnerability…5.5
• CVE-2022-45157A vulnerability has been identified in the way that Rancher …9.1
• CVE-2022-4516Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-45163An information-disclosure vulnerability exists on select NXP…4.6
• CVE-2022-45164An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45166An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45167An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45168An issue was discovered in LIVEBOX Collaboration vDesk throu…6.5
• CVE-2022-45169An issue was discovered in LIVEBOX Collaboration vDesk throu…5.4
• CVE-2022-45170An issue was discovered in LIVEBOX Collaboration vDesk throu…6.5
• CVE-2022-45171An issue was discovered in LIVEBOX Collaboration vDesk throu…8.8