Lucene search
HistoryFeb 24, 2015 - 3:59 p.m.
CVE-2015-1605
cve-2015-1605
dell scriptlogic
asset manager
sql injection
remote attackers
arbitrary sql commands
security vulnerability
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.96 High
EPSS
Percentile
99.5%
Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) GetClientPackage.aspx or (2) GetProcessedPackage.aspx.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dell:asset_manager | dell asset manager | le | 9.0.0 |
Related
prion
prion
Sql injection
2015-02-24 15:59:00
zdi
zdi
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
CVE-2015-1605
2015-02-24 15:00:00
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.96 High
EPSS
Percentile
99.5%
Related for CVE-2015-1605