This vulnerability is a SQL injection flaw in Security Center that enables an attacker with low privileges to execute unauthorized SQL queries, potentially exposing sensitive data from the application's database. The CVSS 3.1 score is 7.1, reflecting network attack vector, low attack complexity, and no user interaction required. The impact is primarily on confidentiality (high) with limited integrity impact and no availability impact. There is no information on affected versions or available patches. No known exploits in the wild have been reported.

Successful exploitation could lead to unauthorized disclosure of sensitive data from the application's database. The integrity of the data could be partially affected, but availability is not impacted. The attacker requires low privileges and no user interaction is necessary, increasing the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected application and monitor for suspicious database activity related to SQL injection attempts.