CVE-2013-3437

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179.

Score

CVSS 2.0 6.5 Medium

Status

Modified - psirt@cisco.com

Published

2013-07-23

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Unified Operations Manager (Cisco)

References

• http://osvdb.org/95472
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3437
• http://tools.cisco.com/security/center/viewAlert.x?alertId=30153