Lucene search
HistoryJun 18, 2014 - 4:55 p.m.
CVE-2014-2949
cve-2014-2949
sql injection
f5 arx
data manager
nvd
web service
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.1%
SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
Node
f5arx_data_managerMatch3.0.0
ORf5arx_data_managerMatch3.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| f5:arx_data_manager | f5 arx data manager | eq | 3.0.0 |
| f5:arx_data_manager | f5 arx data manager | eq | 3.1.0 |
Related
zdi
zdi
cvelist
cvelist
CVE-2014-2949
2014-06-18 16:00:00
cert
cert
F5 ARX Data Manager contains a SQL injection vulnerability
2014-06-17 00:00:00
prion
prion
Sql injection
2014-06-18 16:55:00
nvd
nvd
CVE-2014-2949
2014-06-18 16:55:07
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.1%
Related for CVE-2014-2949