CVE-2022-48599: ScienceLogic SL1

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.

Affected products

• ScienceLogic SL1: up to and including 11.1.2

Published 2023-08-09. Last modified 2026-06-17.