CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-1645

SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.9%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2014-1645

Symantec » Liveupdate Administrator » Version: 1.5.3.21

cpe:2.3:a:symantec:liveupdate_administrator:1.5.3.21
Symantec » Liveupdate Administrator » Version: 1.5.4

cpe:2.3:a:symantec:liveupdate_administrator:1.5.4
Symantec » Liveupdate Administrator » Version: 1.5.7.19

cpe:2.3:a:symantec:liveupdate_administrator:1.5.7.19
Symantec » Liveupdate Administrator » Version: 2.1.0

cpe:2.3:a:symantec:liveupdate_administrator:2.1.0
Symantec » Liveupdate Administrator » Version: 2.1.2

cpe:2.3:a:symantec:liveupdate_administrator:2.1.2
Symantec » Liveupdate Administrator » Version: 2.1.3

cpe:2.3:a:symantec:liveupdate_administrator:2.1.3
Symantec » Liveupdate Administrator » Version: 2.2.1

cpe:2.3:a:symantec:liveupdate_administrator:2.2.1
Symantec » Liveupdate Administrator » Version: 2.2.2

cpe:2.3:a:symantec:liveupdate_administrator:2.2.2
Symantec » Liveupdate Administrator » Version: 2.2.2.9

cpe:2.3:a:symantec:liveupdate_administrator:2.2.2.9
Symantec » Liveupdate Administrator » Version: 2.3.0

cpe:2.3:a:symantec:liveupdate_administrator:2.3.0
Symantec » Liveupdate Administrator » Version: 2.3.1

cpe:2.3:a:symantec:liveupdate_administrator:2.3.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-1645

Products

Pricing

Contact Us