CVE-2013-5694

SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the service_selection parameter.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
VendorProductVersion
opsviewopsview
𝑥
≤ 4.4
opsviewopsview
𝑥
≤ 4.4
opsviewopsview
2.7
opsviewopsview
2.8
opsviewopsview
2.10
opsviewopsview
2.12
opsviewopsview
2.14
opsviewopsview
3.0
opsviewopsview
3.1
opsviewopsview
3.2
opsviewopsview
3.4
opsviewopsview
3.6
opsviewopsview
3.8
opsviewopsview
3.10
opsviewopsview
3.12
opsviewopsview
3.14
opsviewopsview
4.0
opsviewopsview
4.0
opsviewopsview
4.1
opsviewopsview
4.1
opsviewopsview
4.2
opsviewopsview
4.2
opsviewopsview
4.3
opsviewopsview
4.3
𝑥
= Vulnerable software versions