CVE-2012-2998

2012-09-2810:40:21

CWE-89

[email protected]

web.nvd.nist.gov

108

cve-2012-2998

sql injection

trend micro control manager

tmcm

remote attackers

nvd

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.045 Low

EPSS

Percentile

92.5%

JSON

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

trend_microcontrol_managerRange≤5.5std_ed

trend_microcontrol_managerMatch2.0

trend_microcontrol_managerMatch2.1

trend_microcontrol_managerMatch2.5

trend_microcontrol_managerMatch3.0ent_ed

trend_microcontrol_managerMatch3.0std_ed

trend_microcontrol_managerMatch3.5ent_ed

trend_microcontrol_managerMatch3.5std_ed

trend_microcontrol_managerMatch5.0adv_ed

trend_microcontrol_managerMatch5.0std_ed

trend_microcontrol_managerMatch5.5adv_ed

trend_microcontrol_managerMatch6.0

CPENameOperatorVersion
trend_micro:control_managertrend micro control managerle5.5
trend_micro:control_managertrend micro control managereq2.0
trend_micro:control_managertrend micro control managereq2.1
trend_micro:control_managertrend micro control managereq2.5
trend_micro:control_managertrend micro control managereq3.0
trend_micro:control_managertrend micro control managereq3.5
trend_micro:control_managertrend micro control managereq5.0
trend_micro:control_managertrend micro control managereq6.0

CPE	Name	Operator	Version
trend_micro:control_manager	trend micro control manager	le	5.5
trend_micro:control_manager	trend micro control manager	eq	2.0
trend_micro:control_manager	trend micro control manager	eq	2.1
trend_micro:control_manager	trend micro control manager	eq	2.5
trend_micro:control_manager	trend micro control manager	eq	3.0
trend_micro:control_manager	trend micro control manager	eq	3.5
trend_micro:control_manager	trend micro control manager	eq	5.0
trend_micro:control_manager	trend micro control manager	eq	6.0