CVE-2022-2504: Sdd-Baro Project Sdd-Baro

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SDD Computer Software SDD-Baro allows SQL Injection. This issue affects SDD-Baro: before 2.8.432.

Affected products

Published 2023-02-23. Last modified 2026-06-17.