VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 16, 2013· Updated Jun 16, 2026

CVE-2013-4809

CVE-2013-4809

Description

Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Microfocus/Identity Driven Manager2 versions
    cpe:2.3:a:hp:identity_driven_manager:4.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hp:identity_driven_manager:4.0:*:*:*:*:*:*:*
    • (no CPE)range: =4.0
  • Microfocus/ProCurve Manager3 versions
    cpe:2.3:a:hp:procurve_manager:3.20:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:hp:procurve_manager:3.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:procurve_manager:4.0:*:*:*:*:*:*:*
    • (no CPE)range: =3.20, =4.0
  • Intel/Pcmllm-fuzzy
    Range: =3.20, =4.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.