CVE-2014-9095 in Power IQ

Riassunto

di MITRE

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter to license/records.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 26/11/2014
• Divulgazione: 26/11/2014
• Moderazione: accettato
• Voce: VDB-73002
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.02348
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-9095
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-9095
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-9095/