VulnerabilityModified
CVE-2014-2949
SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
MEDIUM 6.5EPSS 1.42%
Does this matter?
Lower severity and a low EPSS score (1.42%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 1.42% probability · 71th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- f5/arx data manager
- Source
- cret@cert.org
References
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15310.html?sr=38021626Vendor Advisory
- http://www.kb.cert.org/vuls/id/210884Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/68078
- http://www.zerodayinitiative.com/advisories/ZDI-14-293/
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15310.html?sr=38021626Vendor Advisory
- http://www.kb.cert.org/vuls/id/210884Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/68078
- http://www.zerodayinitiative.com/advisories/ZDI-14-293/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.