SQL Injection in HP Imc Service Operation Management Software Module

CVE-2013-4827

SQL injection vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664.

Vulnerability class: SQL Injection

EPSS: 0.031 (86.2th percentile) — read the EPSS interpretation.

Affected products

Hp Imc_service_operation_management_software_module
Hp Intelligent_management_center
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)