Lucene search

[email protected]CVE-2014-5159

HistoryAug 21, 2014 - 2:55 p.m.

CVE-2014-5159

2014-08-2114:55:05

CWE-89

[email protected]

web.nvd.nist.gov

cve-2014-5159

sql injection

ossim

alienvault

nvd

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.3%

JSON

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter.

Affected configurations

NVD

Node

alienvaultopen_source_security_information_managementRange≤4.5

alienvaultopen_source_security_information_managementMatch1.0.4

alienvaultopen_source_security_information_managementMatch1.0.6

alienvaultopen_source_security_information_managementMatch2.1

alienvaultopen_source_security_information_managementMatch2.1.2

alienvaultopen_source_security_information_managementMatch2.1.5

alienvaultopen_source_security_information_managementMatch2.1.5-1

alienvaultopen_source_security_information_managementMatch2.1.5-2

alienvaultopen_source_security_information_managementMatch2.1.5-3

alienvaultopen_source_security_information_managementMatch3.1

alienvaultopen_source_security_information_managementMatch3.1.9

alienvaultopen_source_security_information_managementMatch3.1.10

alienvaultopen_source_security_information_managementMatch3.1.12

alienvaultopen_source_security_information_managementMatch4.0

alienvaultopen_source_security_information_managementMatch4.0.3

alienvaultopen_source_security_information_managementMatch4.0.4

alienvaultopen_source_security_information_managementMatch4.1

alienvaultopen_source_security_information_managementMatch4.1.2

alienvaultopen_source_security_information_managementMatch4.1.3

alienvaultopen_source_security_information_managementMatch4.2

alienvaultopen_source_security_information_managementMatch4.2.2

alienvaultopen_source_security_information_managementMatch4.2.3

alienvaultopen_source_security_information_managementMatch4.3

alienvaultopen_source_security_information_managementMatch4.3.1

alienvaultopen_source_security_information_managementMatch4.3.2

alienvaultopen_source_security_information_managementMatch4.3.3

alienvaultopen_source_security_information_managementMatch4.4

CPENameOperatorVersion
alienvault:open_source_security_information_managementalienvault open source security information managementle4.5
alienvault:open_source_security_information_managementalienvault open source security information managementeq1.0.4
alienvault:open_source_security_information_managementalienvault open source security information managementeq1.0.6
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.2
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5-1
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5-2
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5-3
alienvault:open_source_security_information_managementalienvault open source security information managementeq3.1

CPE	Name	Operator	Version
alienvault:open_source_security_information_management	alienvault open source security information management	le	4.5
alienvault:open_source_security_information_management	alienvault open source security information management	eq	1.0.4
alienvault:open_source_security_information_management	alienvault open source security information management	eq	1.0.6
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.2
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5-1
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5-2
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5-3
alienvault:open_source_security_information_management	alienvault open source security information management	eq	3.1

Rows per page:

1-10 of 271

References

forums.alienvault.com/discussion/2559/security-advisory-multiple-vulnerabilities

www.zerodayinitiative.com/advisories/ZDI-14-271/

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.3%

JSON

Related for CVE-2014-5159

cvelist1 prion1 zdi1 nvd1