📦

intelligent_workload_distribution_manager

Vendor: genesys

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 2 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 1.68% Exploit Prob.
Latest CVE CVE-2021-40861 Dec 08

Security Vulnerability Index

Page 1 / 1
7.2 CVSS
CVE-2021-40861
RCE

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allows an attacker to execute arbitrary SQL queries via the value attribute, with which all data in the database can be extracted and OS command execution is possible depending on the permissions and/or database engine.

EPSS: 1.68%
7.2 CVSS
CVE-2021-40860
RCE

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.11 allows an attacker to execute arbitrary SQL queries via the ql_expression parameter, with which all data in the database can be extracted and OS command execution is possible depending on the permissions and/or database engine.

EPSS: 1.68%