CVE-2013-3437: SQL Injection

Published Jul 22, 2013

Updated

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179.

Affected Software

1 affected component

cisco Unified Operations Manager

Event History

Jul 22, 2013

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3437?

CVE-2013-3437 is rated as a high severity vulnerability due to its ability to allow remote authenticated users to execute arbitrary SQL commands.

How do I fix CVE-2013-3437?

To fix CVE-2013-3437, upgrade to a patched version of Cisco Unified Operations Manager as provided in Cisco's security advisories.

Who is affected by CVE-2013-3437?

CVE-2013-3437 affects remote authenticated users of Cisco Unified Operations Manager who can exploit the SQL injection vulnerability.

What type of vulnerability is CVE-2013-3437?

CVE-2013-3437 is a SQL injection vulnerability that allows execution of arbitrary SQL commands.

What product does CVE-2013-3437 impact?

CVE-2013-3437 specifically impacts Cisco Unified Operations Manager.