PatchTheCVECVE-2022-1358: The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements
CVE-2022-1358 is a medium-severity flaw (CVSS 5.9) affecting cnmaestro. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 5.9 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | High |
| User interaction | None |
| EPSS exploit chance | 0.9% (top 41%) |
| CISA exploited list | No |
| Weakness | CWE-89 |
| Published | 2022-05-17 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-1358?
cnmaestro: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2022-1358 being exploited?
CVE-2022-1358 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-1358 affect?
CVE-2022-1358 affects cnmaestro. Severity is medium (CVSS 5.9). The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.
How urgent is CVE-2022-1358?
Priority 35/100. No elevated risk signals yet.
Related CVEs
- CVE-2022-1362 MEDIUM 5.0 MITIGATE The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted pack
- CVE-2022-1361 HIGH 7.4 MITIGATE The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralizatio
- CVE-2022-1360 HIGH 8.2 MITIGATE The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server
- CVE-2022-1359 MEDIUM 5.7 MITIGATE The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pa
- CVE-2022-1357 CRITICAL 9.8 MITIGATE The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execut