SQL Injection

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. By using an Automate API in ConnectWise Automate before 2020.5.178, a remote authenticated user could execute commands and/or modifications within an individual Automate instance…CVE-2020-14159Connectwise · 1.9% likely

   CWE-89

2. An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extr…CVE-2021-32582Connectwise · 1.1% likely

   CWE-89

3. A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A SQL Injection in the probe implementation to save data to a custom table exists du…CVE-2020-15008Connectwise · 0.9% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.