SQL Injection in F5 Arx Data Manager

CVE-2014-2949

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.014 (70.1th percentile) — read the EPSS interpretation.

Affected products

F5 Arx_data_manager — versions 3.0.0, 3.1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
cret@cert.org (x_refsource_MISC)
cret@cert.org (vdb-entry, x_refsource_BID)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)