CVE-2012-1063
Published Feb 14, 2012
Last updated 7 years ago
Overview
- Description
- Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or (2) period parameter to showHistoryData.do.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-89
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49E29074-F2FD-41CC-A6D0-6C8D4FEA1247"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A988BE5D-C923-4C9C-AE58-175BD91A5435"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19B623B5-561A-419E-BF64-0D7F783ED35B"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:10.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA192D05-A1F4-4B01-9E10-5B996DE20516"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "927040C8-9B49-4C2A-B712-2592DB10A375"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E9D7AE4-AD75-48FA-96F7-03ABD826C267"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "983B7128-1ED3-4AAB-9CAC-DE90FA04912A"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6702B909-BCA1-42D2-A565-821068349177"
},
{
"criteria": "cpe:2.3:a:manageengine:applications_manager:9.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCB1BA82-CAEB-424A-9AFF-AE5E4CC8019F"
}
],
"operator": "OR"
}
]
}
]