Description
SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka user parameter).
Exploits (1)
References (7)
Core 7
Core References
Exploit x_refsource_misc
http://packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91929
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/66302
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1029927
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/104634
Exploit mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Mar/325
Exploit exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/32368
Scores
EPSS
0.0489
EPSS Percentile
89.6%
Details
CWE
CWE-89
Status
published
Products (1)
mcafee/asset_manager
6.6
Published
Mar 24, 2014
Tracked Since
Feb 18, 2026