VulnerabilityModified
CVE-2014-5383
SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
MEDIUM 6.5EPSS 21.2%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 21.2%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 21.19% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- alienvault/open source security information management
- Source
- cve@mitre.org
References
- http://forums.alienvault.com/discussion/2690Vendor Advisory
- http://www.securityfocus.com/bid/67312Exploit
- http://forums.alienvault.com/discussion/2690Vendor Advisory
- http://www.securityfocus.com/bid/67312Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.