CVE-2018-14874: Polarisft Intellect Core Banking

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. Input passed through the code parameter in three pages as collaterals/colexe3t.jsp and /references/refsuppu.jsp and /references/refbranu.jsp is mishandled before being used in SQL queries, allowing SQL injection with an authenticated session.

Affected products

• Polarisft Intellect Core Banking: version 9.7.1 only

Published 2019-04-30. Last modified 2026-06-17.