CVE-2013-5525

Опубликовано: 10 окт. 2013

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.

Ссылки

http://osvdb.org/98167
http://secunia.com/advisories/55098
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5525
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=31160
Vendor Advisory
http://www.securitytracker.com/id/1029156
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/87723
http://osvdb.org/98167
http://secunia.com/advisories/55098
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5525
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=31160
Vendor Advisory
http://www.securitytracker.com/id/1029156
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/87723

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:identity_services_engine_software:*:*:*:*:*:*:*:*

Версия до 1.2 (включая)

cpe:2.3:a:cisco:identity_services_engine_software:1.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine_software:1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.0076

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-67q2-r7xw-j63p

github

больше 3 лет назад