CVE-2022-45165: Archibus Web Central

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create an SQL query. It causes this service to be prone to SQL injection.

Affected products

• Archibus Web Central: version 2022.03.01.107 only

Published 2023-01-10. Last modified 2026-06-17.