Search/CVE-2018-10595
● CVE — Medium

CVE-2018-10595

DiscoveredMay 24, 2018UpdatedNov 21, 2024

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.

View graph Watch Export
CVSS v3.1
6.3 MEDIUM
EPSS
0.41%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Nov 3, 2026
● 0.01pp
0.41% → 0.41% over 11 tracked changes
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityHIGH
Privileges RequiredHIGH
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.0/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Connections
1 relationships
Timeline
disclosure → media coverage
May 24, 2018
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024