CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 6.5
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: sql injection vulnerability in the management server in symantec embedded security: critical system protection (ses:csp) 1.0.x before 1.0 mp5, embedded security: critical system protection for controllers and devices (ses:csp) 6.5.0 before mp1, critical system protection (scsp) before 5.2.9 mp6, data center security: server advanced server (dcs:sa) 6.x before 6.5 mp1 and 6.6 before mp1, and data center security: server advanced server and agents (dcs:sa) through 6.6 mp1 allows remote authenticated users to execute arbitrary sql commands via unspecified vectors.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2016-06-08
Last Modified Date: 2019-09-20