Lucene search

[email protected]CVE-2014-4305

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-4305

2022-10-0316:20:46

CWE-89

[email protected]

web.nvd.nist.gov

cve-2014-4305

sql injection

nice recording express

cybertech express

security vulnerability

remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.1%

JSON

Multiple SQL injection vulnerabilities in NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

nicerecording_expressRange≤6.5.7

nicerecording_expressMatch6.3.5

CPENameOperatorVersion
nice:recording_expressnice recording expressle6.5.7
nice:recording_expressnice recording expresseq6.3.5

CPE	Name	Operator	Version
nice:recording_express	nice recording express	le	6.5.7
nice:recording_express	nice recording express	eq	6.3.5

References

packetstormsecurity.com/files/126858/NICE-Recording-eXpress-6.x-Root-Backdoor-XSS-Bypass.html

www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140528-0_NICE_Recording_eXpress_Multiple_critical_vulnerabilities_v10.txt

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.1%

JSON

Related for CVE-2014-4305

prion1 nvd1 cvelist1