medium6.5
CVE-2014-2949
SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands v…
Impact
SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Arx Data Manager | Versions 3.0.0, 3.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15310.html?sr=38021626
- http://www.kb.cert.org/vuls/id/210884
- http://www.securityfocus.com/bid/68078
- http://www.zerodayinitiative.com/advisories/ZDI-14-293/
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15310.html?sr=38021626
- http://www.kb.cert.org/vuls/id/210884
- http://www.securityfocus.com/bid/68078
- http://www.zerodayinitiative.com/advisories/ZDI-14-293/