Sql injection

2014-08-2114:55:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.3%

JSON

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter.

CPENameOperatorVersion
open_source_security_information_managementeq4.1.2
open_source_security_information_managementeq4.3.3
open_source_security_information_managementeq2.1.5-3
open_source_security_information_managementeq3.1
open_source_security_information_managementeq4.2
open_source_security_information_managementeq2.1.5-2
open_source_security_information_managementeq2.1
open_source_security_information_managementeq3.1.12
open_source_security_information_managementeq4.2.2
open_source_security_information_managementeq4.0.4

Name	Operator	Version
open_source_security_information_management	eq	4.1.2
open_source_security_information_management	eq	4.3.3
open_source_security_information_management	eq	2.1.5-3
open_source_security_information_management	eq	3.1
open_source_security_information_management	eq	4.2
open_source_security_information_management	eq	2.1.5-2
open_source_security_information_management	eq	2.1
open_source_security_information_management	eq	3.1.12
open_source_security_information_management	eq	4.2.2
open_source_security_information_management	eq	4.0.4