CVE-2014-3446: Bss Continuity CMS

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter.

Affected products

• Bss Continuity CMS: version 4.2.22640.0 only

Published 2014-10-30. Last modified 2026-06-17.