{"id":"CVE-2007-5084","url":"https://www.cyber-defence.io/tools/cve/CVE-2007-5084","generatedAt":"2026-10-27T19:37:52.503Z","title":"Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3)…","description":"Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others.","published":"2007-10-01T20:17:00.000Z","lastModified":"2026-06-16T22:45:25.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":6.8,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},"cwe":["CWE-89"],"affected":["broadcom/brightstor hierarchical storage manager"],"epss":{"score":0.01809,"percentile":0.78456,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.81%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-17","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26914","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1018747","source":"cve@mitre.org"},{"url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp","tags":["Patch"],"source":"cve@mitre.org"},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692","tags":["Patch"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25823","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3275","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36828","source":"cve@mitre.org"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26914","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1018747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3275","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36828","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-5084","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}