CVE-2009-3165

HIGH · CVSS 7.5 EPSS 1.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-09-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-3165

Severity

HIGH

CVSS

7.5

EPSS

1.39%

Original NVD Description

SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.