CVE-2013-1613

2022-10-0316:14:47

CWE-89

[email protected]

web.nvd.nist.gov

cve-2013-1613

sql injection

symantec

ssim

security vulnerability

nvd

4.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:M/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.1%

JSON

SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

symantecsecurity_information_managerMatch4.7.0

symantecsecurity_information_managerMatch4.7.1

symantecsecurity_information_managerMatch4.7.2

symantecsecurity_information_managerMatch4.7.3

symantecsecurity_information_managerMatch4.7.4

symantecsecurity_information_managerMatch4.8.0

symantecsecurity_information_manager_applianceMatch-

CPENameOperatorVersion
symantec:security_information_managersymantec security information managereq4.7.0
symantec:security_information_managersymantec security information managereq4.7.1
symantec:security_information_managersymantec security information managereq4.7.2
symantec:security_information_managersymantec security information managereq4.7.3
symantec:security_information_managersymantec security information managereq4.7.4
symantec:security_information_managersymantec security information managereq4.8.0
symantec:security_information_manager_appliancesymantec security information manager applianceeq-

CPE	Name	Operator	Version
symantec:security_information_manager	symantec security information manager	eq	4.7.0
symantec:security_information_manager	symantec security information manager	eq	4.7.1
symantec:security_information_manager	symantec security information manager	eq	4.7.2
symantec:security_information_manager	symantec security information manager	eq	4.7.3
symantec:security_information_manager	symantec security information manager	eq	4.7.4
symantec:security_information_manager	symantec security information manager	eq	4.8.0
symantec:security_information_manager_appliance	symantec security information manager appliance	eq	-