CVE-2014-7289: SQL Injection
SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7289?
CVE-2014-7289 is classified as a high severity vulnerability due to its potential to allow remote authenticated users to execute arbitrary SQL commands.
How do I fix CVE-2014-7289?
To fix CVE-2014-7289, upgrade Symantec Critical System Protection to version 5.2.9 MP6 or later, and Symantec Data Center Security: Server Advanced to version 6.0 MP1 or later.
What software is affected by CVE-2014-7289?
CVE-2014-7289 affects Symantec Critical System Protection version 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced version 6.0.x before MP1.
Who is at risk due to CVE-2014-7289?
Remote authenticated users are at risk due to CVE-2014-7289, as they may exploit this vulnerability to execute malicious SQL commands.
What types of attacks are possible due to CVE-2014-7289?
Due to CVE-2014-7289, an attacker could perform SQL injection attacks to manipulate the database and potentially gain unauthorized access to sensitive data.