CVE-2022-38616 — CVE-2022-38616

CVE-2022-38616

HIGH · CVSS 8.8

EPSS exploitation probability: 0%

Published 2022-09-13T12:15:10.727 · Last modified 2026-06-17T04:56:54.390

Summary

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /feegroups/tgrt_group.jsf.

bpcbt — smartvista_front-end

Add your gear to cvedb and we'll alert you only when bpcbt ships something exploited.

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.