Lucene search

K
cveMitreCVE-2006-5675
HistoryNov 03, 2006 - 2:07 a.m.

CVE-2006-5675

2006-11-0302:07:00
mitre
web.nvd.nist.gov
24
pentaho
business intelligence
bi suite
vulnerability
sql injection
mysql scripts
security
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

Low

EPSS

0.003

Percentile

65.2%

Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have unknown impact and attack vectors, related to “MySQL Scripts need changes for security,” possibly SQL injection vulnerabilities associated with these scripts.

Affected configurations

Nvd
Node
pentahobusiness_intelligence_suiteMatch1.2_rc2
VendorProductVersionCPE
pentahobusiness_intelligence_suite1.2_rc2cpe:2.3:a:pentaho:business_intelligence_suite:1.2_rc2:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

Low

EPSS

0.003

Percentile

65.2%

Related for CVE-2006-5675