Lucene search

[email protected]CVE-2014-3997

HistoryDec 05, 2014 - 3:59 p.m.

CVE-2014-3997

2014-12-0515:59:01

CWE-89

[email protected]

web.nvd.nist.gov

cve-2014-3997

sql injection

manageengine

password manager pro

it360

vulnerability

nvd

remote attackers

msp edition

metadataservlet

it security

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.1%

JSON

SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition 5 through 7 build 7003, IT360 and IT360 Managed Service Providers (MSP) edition before 10.3.3 build 10330, and possibly other ManageEngine products, allows remote attackers or remote authenticated users to execute arbitrary SQL commands via the sv parameter to MetadataServlet.dat.

Affected configurations

NVD

Node

zohocorpmanageengine_password_manager_proMatch5.0-

zohocorpmanageengine_password_manager_proMatch5.1-

zohocorpmanageengine_password_manager_proMatch5.2-

zohocorpmanageengine_password_manager_proMatch5.3-

zohocorpmanageengine_password_manager_proMatch5.4-

zohocorpmanageengine_password_manager_proMatch6.0-

zohocorpmanageengine_password_manager_proMatch6.0build6002-

zohocorpmanageengine_password_manager_proMatch6.1build6104-

zohocorpmanageengine_password_manager_proMatch6.2-

zohocorpmanageengine_password_manager_proMatch6.2build6201-

zohocorpmanageengine_password_manager_proMatch6.3-

zohocorpmanageengine_password_manager_proMatch6.4-

zohocorpmanageengine_password_manager_proMatch6.4build6401-

zohocorpmanageengine_password_manager_proMatch6.4build6402-

zohocorpmanageengine_password_manager_proMatch6.4build6403-

zohocorpmanageengine_password_manager_proMatch6.4build6404-

zohocorpmanageengine_password_manager_proMatch6.5-

zohocorpmanageengine_password_manager_proMatch6.5build6503-

zohocorpmanageengine_password_manager_proMatch6.5build6504-

zohocorpmanageengine_password_manager_proMatch6.5build6505-

zohocorpmanageengine_password_manager_proMatch6.6build6600-

zohocorpmanageengine_password_manager_proMatch6.7build6700-

zohocorpmanageengine_password_manager_proMatch6.7build6701-

zohocorpmanageengine_password_manager_proMatch6.8build6800-

zohocorpmanageengine_password_manager_proMatch6.8build6801-

zohocorpmanageengine_password_manager_proMatch6.8build6802-

zohocorpmanageengine_password_manager_proMatch6.8build6803-

zohocorpmanageengine_password_manager_proMatch6.9-

zohocorpmanageengine_password_manager_proMatch6.9build6900-

zohocorpmanageengine_password_manager_proMatch6.9build6901-

zohocorpmanageengine_password_manager_proMatch6.9build6902-

zohocorpmanageengine_password_manager_proMatch6.9build6903-

zohocorpmanageengine_password_manager_proMatch6.9build6904-

zohocorpmanageengine_password_manager_proMatch7.0-

zohocorpmanageengine_password_manager_proMatch7.0build7000-

zohocorpmanageengine_password_manager_proMatch7.0build7001-

zohocorpmanageengine_password_manager_proMatch7.0build7002-

zohocorpmanageengine_password_manager_proMatch7.0build7003-

Node

zohocorpmanageengine_it360Range≤10.3.3-

zohocorpmanageengine_it360Range≤10.3.3managed_service_providers

Node

zohocorpmanageengine_password_manager_proMatch5.0managed_service_providers

zohocorpmanageengine_password_manager_proMatch5.1managed_service_providers

zohocorpmanageengine_password_manager_proMatch5.2managed_service_providers

zohocorpmanageengine_password_manager_proMatch5.3managed_service_providers

zohocorpmanageengine_password_manager_proMatch5.4managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.0managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.0build6002managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.1managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.1build6104managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.2managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.2build6201managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.3managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.4managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.4build6401managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.4build6402managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.4build6403managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.4build6404managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.5managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.5build6503managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.5build6504managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.5build6505managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.6build6600managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.7build6700managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.7build6701managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.8build6800managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.8build6801managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.8build6802managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.8build6803managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.9managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.9build6900managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.9build6901managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.9build6902managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.9build6903managed_service_providers

zohocorpmanageengine_password_manager_proMatch6.9build6904managed_service_providers

zohocorpmanageengine_password_manager_proMatch7.0managed_service_providers

zohocorpmanageengine_password_manager_proMatch7.0build7000managed_service_providers

zohocorpmanageengine_password_manager_proMatch7.0build7001managed_service_providers

zohocorpmanageengine_password_manager_proMatch7.0build7002managed_service_providers

zohocorpmanageengine_password_manager_proMatch7.0build7003managed_service_providers

CPENameOperatorVersion
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq5.0
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq5.1
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq5.2
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq5.3
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq5.4
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq6.0
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq6.1
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq6.2
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq6.3
zohocorp:manageengine_password_manager_prozohocorp manageengine password manager proeq6.4

CPE	Name	Operator	Version
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	5.0
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	5.1
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	5.2
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	5.3
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	5.4
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	6.0
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	6.1
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	6.2
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	6.3
zohocorp:manageengine_password_manager_pro	zohocorp manageengine password manager pro	eq	6.4