CVE-2022-39029

Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt