CVEvulnerability
CVE-2012-2576
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-12-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.
Affected configurations
• solarwinds backup profiler (< 5.1.2)
• solarwinds storage manager (< 5.1.2)
• solarwinds storage profiler (< 5.1.2)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.exploit-db.com/exploits/18818 Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/18833 Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/51639 Third Party Advisory, VDB Entry
- http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72680 Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/18818 Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/18833 Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/51639 Third Party Advisory, VDB Entry
- http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72680 Third Party Advisory, VDB Entry