SQL Injection in Rsa Envision

CVE-2012-0401

Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.010 (60.1th percentile) — read the EPSS interpretation.

Affected products

Rsa Envision — versions 4.0, 4.1
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security_alert@emc.com (vdb-entry, x_refsource_BID)
security_alert@emc.com (x_refsource_SECUNIA, third-party-advisory)
security_alert@emc.com (vdb-entry, x_refsource_XF)
security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)