CVE-2014-2652

CRITICAL

OpenScape Deployment Service <6.x,7.x.R1.11.3 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0126
EPSS Percentile 66.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (2)
unify/openscape_deployment_service 7.0
unify/openscape_deployment_service < 6.0
Published Mar 19, 2018
Tracked Since Feb 18, 2026