Unrated severityNVD Advisory· Published Nov 8, 2018· Updated Nov 26, 2024
Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability
CVE-2018-15447
Description
A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation of user-supplied input in SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: n/a
Patches
Vulnerability mechanics
References
2- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-cimc-sql-injectmitrevendor-advisoryx_refsource_CISCO
- www.securityfocus.com/bid/105855mitrevdb-entryx_refsource_BID
News mentions
0No linked articles in our index yet.