Описание
SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server (DMS) before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Ссылки
- PatchUS Government Resource
- PatchUS Government Resource
- PatchUS Government Resource
- PatchUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 1.4.2 (включая)
Одно из
cpe:2.3:a:samsung:data_management_server:*:*:*:*:*:*:*:*
cpe:2.3:a:samsung:data_management_server:1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:samsung:data_management_server:1.4.1:*:*:*:*:*:*:*
EPSS
Процентиль: 86%
0.02887
Низкий
7.5 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 3 лет назад
SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server (DMS) before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
EPSS
Процентиль: 86%
0.02887
Низкий
7.5 High
CVSS2
Дефекты
CWE-89