Lucene search

[email protected]NVD:CVE-2013-1613

HistoryJul 08, 2013 - 5:55 p.m.

CVE-2013-1613

2013-07-0817:55:02

CWE-89

[email protected]

web.nvd.nist.gov

4.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:M/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.1%

JSON

SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

symantecsecurity_information_managerMatch4.7.0

symantecsecurity_information_managerMatch4.7.1

symantecsecurity_information_managerMatch4.7.2

symantecsecurity_information_managerMatch4.7.3

symantecsecurity_information_managerMatch4.7.4

symantecsecurity_information_managerMatch4.8.0

symantecsecurity_information_manager_applianceMatch-

References

www.securityfocus.com/bid/60796

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00

4.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:M/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.1%

JSON

Related for NVD:CVE-2013-1613

cvelist1 cve1 prion1 symantec1