Lucene search

K
nvd[email protected]NVD:CVE-2013-6321
HistoryJan 10, 2014 - 12:02 p.m.

CVE-2013-6321

2014-01-1012:02:51
CWE-89
web.nvd.nist.gov
3

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.003

Percentile

70.0%

SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite (aka Atlas Policy Suite) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

Nvd
Node
ibmatlas_ediscovery_process_managementRange6.0.1.5
OR
ibmatlas_ediscovery_process_managementMatch6.0.2
OR
ibmatlas_suiteMatch-
OR
ibmdisposal_and_governance_management_for_itRange6.0.1.5
OR
ibmdisposal_and_governance_management_for_itMatch6.0.2
OR
ibmglobal_retention_policy_and_schedule_managementRange6.0.1.5
OR
ibmglobal_retention_policy_and_schedule_managementMatch6.0.2
VendorProductVersionCPE
ibmatlas_ediscovery_process_management*cpe:2.3:a:ibm:atlas_ediscovery_process_management:*:*:*:*:*:*:*:*
ibmatlas_ediscovery_process_management6.0.2cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.2:*:*:*:*:*:*:*
ibmatlas_suite-cpe:2.3:a:ibm:atlas_suite:-:*:*:*:*:*:*:*
ibmdisposal_and_governance_management_for_it*cpe:2.3:a:ibm:disposal_and_governance_management_for_it:*:*:*:*:*:*:*:*
ibmdisposal_and_governance_management_for_it6.0.2cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.2:*:*:*:*:*:*:*
ibmglobal_retention_policy_and_schedule_management*cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:*:*:*:*:*:*:*:*
ibmglobal_retention_policy_and_schedule_management6.0.2cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.2:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.003

Percentile

70.0%

Related for NVD:CVE-2013-6321