CVE-2013-3437

Description

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=30153

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3437

http://osvdb.org/95472

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3