Lucene search

DellCVE-2012-0401

HistoryMar 20, 2012 - 3:55 p.m.

CVE-2012-0401

2012-03-2015:55:00

CWE-89

dell

web.nvd.nist.gov

emc

rsa

envision

sql injection

vulnerability

remote authenticated

nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.3

Confidence

Low

EPSS

0.002

Percentile

61.9%

JSON

Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

Nvd

Node

rsaenvisionMatch4.0sp1

rsaenvisionMatch4.0sp2

rsaenvisionMatch4.0sp3

rsaenvisionMatch4.0sp4

rsaenvisionMatch4.1

VendorProductVersionCPE
rsaenvision4.0cpe:2.3:a:rsa:envision:4.0:sp1:*:*:*:*:*:*
rsaenvision4.0cpe:2.3:a:rsa:envision:4.0:sp2:*:*:*:*:*:*
rsaenvision4.0cpe:2.3:a:rsa:envision:4.0:sp3:*:*:*:*:*:*
rsaenvision4.0cpe:2.3:a:rsa:envision:4.0:sp4:*:*:*:*:*:*
rsaenvision4.1cpe:2.3:a:rsa:envision:4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rsa	envision	4.0	cpe:2.3:a:rsa:envision:4.0:sp1::::::
rsa	envision	4.0	cpe:2.3:a:rsa:envision:4.0:sp2::::::
rsa	envision	4.0	cpe:2.3:a:rsa:envision:4.0:sp3::::::
rsa	envision	4.0	cpe:2.3:a:rsa:envision:4.0:sp4::::::
rsa	envision	4.1	cpe:2.3:a:rsa:envision:4.1:::::::*

References

archives.neohapsis.com/archives/bugtraq/2012-03/0081.html

secunia.com/advisories/48484

www.securityfocus.com/bid/52557

www.securitytracker.com/id?1026819

exchange.xforce.ibmcloud.com/vulnerabilities/74137

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.3

Confidence

Low

EPSS

0.002

Percentile

61.9%

JSON

Related for CVE-2012-0401