8.8 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.972 High
EPSS
Percentile
99.8%
Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.
CPE | Name | Operator | Version |
---|---|---|---|
total_defense | eq | 12.0.114 |
secunia.com/advisories/44097
securityreason.com/securityalert/8403
securitytracker.com/id?1025353
www.securityfocus.com/archive/1/517489/100/0/threaded
www.securityfocus.com/archive/1/517490/100/0/threaded
www.securityfocus.com/archive/1/517491/100/0/threaded
www.securityfocus.com/archive/1/517493/100/0/threaded
www.securityfocus.com/archive/1/517494/100/0/threaded
www.securityfocus.com/archive/1/517496/100/0/threaded
www.securityfocus.com/archive/1/517497/100/0/threaded
www.securityfocus.com/archive/1/517498/100/0/threaded
www.securityfocus.com/bid/47355
www.vupen.com/english/advisories/2011/0977
www.zerodayinitiative.com/advisories/ZDI-11-128/
www.zerodayinitiative.com/advisories/ZDI-11-129/
www.zerodayinitiative.com/advisories/ZDI-11-130/
www.zerodayinitiative.com/advisories/ZDI-11-131/
www.zerodayinitiative.com/advisories/ZDI-11-132/
www.zerodayinitiative.com/advisories/ZDI-11-133/
www.zerodayinitiative.com/advisories/ZDI-11-134/
exchange.xforce.ibmcloud.com/vulnerabilities/66725
support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={CD065CEC-AFE2-4D9D-8E0B-BE7F6E345866}