Login Request a demo
Unscored severity · published Aug 1, 2011
CVE-2011-2403
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors
–
CVSS
2%
EPSS
No
On KEV
Description
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Network Automation · HP
7.2; 7.5; 7.6; 9.0; 9.10 · source: NVD
Affected product
NA
Network Automation
HP
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2403
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2403
Vendor Advisory
http://marc.info/?l=bugtraq&m=131188727830971&w=2
osvdb.org
http://osvdb.org/74134
secunia.com
http://secunia.com/advisories/45454
securityreason.com
http://securityreason.com/securityalert/8321
www.securityfocus.com
http://www.securityfocus.com/bid/48924
www.securitytracker.com
http://www.securitytracker.com/id?1025862
More from Network Automation
9.8
CVE-2017-5814
A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found
9.8
CVE-2017-5810
A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found
9.8
CVE-2016-8511
A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11,…
9.8
CVE-2016-1989
HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a…
9.8
CVE-2016-1988
HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a…