CVE-2013-4827

2013-10-1310:20:00

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

hp intelligent management center

imc

remote attackers

cve-2013-4827

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.3%

JSON

SQL injection vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664.

CPENameOperatorVersion
hp:intelligent_management_centerhp intelligent management centereq*
hp:imc_service_operation_management_software_modulehp imc service operation management software moduleeq-

CPE	Name	Operator	Version
hp:intelligent_management_center	hp intelligent management center	eq	*
hp:imc_service_operation_management_software_module	hp imc service operation management software module	eq	-