CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5967

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the date_from parameter to (1) radar-iso27001-potential.php, (2) radar-iso27001-A12IS_acquisition-pot.php, (3) radar-iso27001-A11AccessControl-pot.php, (4) radar-iso27001-A10Com_OP_Mgnt-pot.php, or (5) radar-pci-potential.php in RadarReport/.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 53.2%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2013-5967

Alienvault » Open Source Security Information Management » Version: 1.0.4

cpe:2.3:a:alienvault:open_source_security_information_management:1.0.4
Alienvault » Open Source Security Information Management » Version: 1.0.6

cpe:2.3:a:alienvault:open_source_security_information_management:1.0.6
Alienvault » Open Source Security Information Management » Version: 2.1

cpe:2.3:a:alienvault:open_source_security_information_management:2.1
Alienvault » Open Source Security Information Management » Version: 2.1.2

cpe:2.3:a:alienvault:open_source_security_information_management:2.1.2
Alienvault » Open Source Security Information Management » Version: 2.1.5

cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5
Alienvault » Open Source Security Information Management » Version: 2.1.5-1

cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-1
Alienvault » Open Source Security Information Management » Version: 2.1.5-2

cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-2
Alienvault » Open Source Security Information Management » Version: 2.1.5-3

cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-3
Alienvault » Open Source Security Information Management » Version: 3.1

cpe:2.3:a:alienvault:open_source_security_information_management:3.1
Alienvault » Open Source Security Information Management » Version: 3.1.10

cpe:2.3:a:alienvault:open_source_security_information_management:3.1.10
Alienvault » Open Source Security Information Management » Version: 3.1.12

cpe:2.3:a:alienvault:open_source_security_information_management:3.1.12
Alienvault » Open Source Security Information Management » Version: 3.1.9

cpe:2.3:a:alienvault:open_source_security_information_management:3.1.9
Alienvault » Open Source Security Information Management » Version: 4.0

cpe:2.3:a:alienvault:open_source_security_information_management:4.0
Alienvault » Open Source Security Information Management » Version: 4.0.3

cpe:2.3:a:alienvault:open_source_security_information_management:4.0.3
Alienvault » Open Source Security Information Management » Version: 4.0.4

cpe:2.3:a:alienvault:open_source_security_information_management:4.0.4
Alienvault » Open Source Security Information Management » Version: 4.1

cpe:2.3:a:alienvault:open_source_security_information_management:4.1
Alienvault » Open Source Security Information Management » Version: 4.1.2

cpe:2.3:a:alienvault:open_source_security_information_management:4.1.2
Alienvault » Open Source Security Information Management » Version: 4.1.3

cpe:2.3:a:alienvault:open_source_security_information_management:4.1.3
Alienvault » Open Source Security Information Management » Version: 4.2

cpe:2.3:a:alienvault:open_source_security_information_management:4.2
Alienvault » Open Source Security Information Management » Version: 4.2.2

cpe:2.3:a:alienvault:open_source_security_information_management:4.2.2
Alienvault » Open Source Security Information Management » Version: 4.2.3

cpe:2.3:a:alienvault:open_source_security_information_management:4.2.3
Alienvault » Open Source Security Information Management » Version: 4.3

cpe:2.3:a:alienvault:open_source_security_information_management:4.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5967

Products

Pricing

Contact Us