Lucene search

[email protected]CVE-2014-5159

HistoryAug 21, 2014 - 2:55 p.m.

CVE-2014-5159

2014-08-2114:55:05

CWE-89

[email protected]

web.nvd.nist.gov

cve-2014-5159

sql injection

ossim

alienvault

nvd

vulnerability

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.2%

JSON

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter.

Affected configurations

NVD

Node

alienvaultopen_source_security_information_managementRange≤4.5

alienvaultopen_source_security_information_managementMatch1.0.4

alienvaultopen_source_security_information_managementMatch1.0.6

alienvaultopen_source_security_information_managementMatch2.1

alienvaultopen_source_security_information_managementMatch2.1.2

alienvaultopen_source_security_information_managementMatch2.1.5

alienvaultopen_source_security_information_managementMatch2.1.5-1

alienvaultopen_source_security_information_managementMatch2.1.5-2

alienvaultopen_source_security_information_managementMatch2.1.5-3

alienvaultopen_source_security_information_managementMatch3.1

alienvaultopen_source_security_information_managementMatch3.1.9

alienvaultopen_source_security_information_managementMatch3.1.10

alienvaultopen_source_security_information_managementMatch3.1.12

alienvaultopen_source_security_information_managementMatch4.0

alienvaultopen_source_security_information_managementMatch4.0.3

alienvaultopen_source_security_information_managementMatch4.0.4

alienvaultopen_source_security_information_managementMatch4.1

alienvaultopen_source_security_information_managementMatch4.1.2

alienvaultopen_source_security_information_managementMatch4.1.3

alienvaultopen_source_security_information_managementMatch4.2

alienvaultopen_source_security_information_managementMatch4.2.2

alienvaultopen_source_security_information_managementMatch4.2.3

alienvaultopen_source_security_information_managementMatch4.3

alienvaultopen_source_security_information_managementMatch4.3.1

alienvaultopen_source_security_information_managementMatch4.3.2

alienvaultopen_source_security_information_managementMatch4.3.3

alienvaultopen_source_security_information_managementMatch4.4

CPENameOperatorVersion
alienvault:open_source_security_information_managementalienvault open source security information managementle4.5
alienvault:open_source_security_information_managementalienvault open source security information managementeq1.0.4
alienvault:open_source_security_information_managementalienvault open source security information managementeq1.0.6
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.2
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5-1
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5-2
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5-3
alienvault:open_source_security_information_managementalienvault open source security information managementeq3.1

CPE	Name	Operator	Version
alienvault:open_source_security_information_management	alienvault open source security information management	le	4.5
alienvault:open_source_security_information_management	alienvault open source security information management	eq	1.0.4
alienvault:open_source_security_information_management	alienvault open source security information management	eq	1.0.6
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.2
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5-1
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5-2
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5-3
alienvault:open_source_security_information_management	alienvault open source security information management	eq	3.1