Lucene search

CiscoCVE-2016-1393

HistoryMay 12, 2016 - 1:59 a.m.

CVE-2016-1393

2016-05-1201:59:10

CWE-89

cisco

web.nvd.nist.gov

cve-2016-1393

sql injection

cisco

cnap

vulnerability

remote authenticated users

bug id cscuy72175

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner (CNAP) 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175.

Affected configurations

Nvd

Node

ciscocloud_network_automation_provisionerMatch1.0

ciscocloud_network_automation_provisionerMatch1.1

VendorProductVersionCPE
ciscocloud_network_automation_provisioner1.0cpe:2.3:a:cisco:cloud_network_automation_provisioner:1.0:*:*:*:*:*:*:*
ciscocloud_network_automation_provisioner1.1cpe:2.3:a:cisco:cloud_network_automation_provisioner:1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	cloud_network_automation_provisioner	1.0	cpe:2.3:a:cisco:cloud_network_automation_provisioner:1.0:::::::*
cisco	cloud_network_automation_provisioner	1.1	cpe:2.3:a:cisco:cloud_network_automation_provisioner:1.1:::::::*

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160510-cnap

www.securityfocus.com/bid/90519

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

Related for CVE-2016-1393