CVEvulnerability
CVE-2013-3437
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179.
Affected configurations
• cisco unified operations manager
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/95472 osvdb.org
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3437 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30153 Vendor Advisory
- http://osvdb.org/95472 osvdb.org
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3437 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30153 Vendor Advisory