Critical severity · published Dec 20, 2017
CVE-2012-2576
SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before…
9.8
CVSS
59.4%
EPSS
No
On KEV
Description
SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)59.4% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BP
Backup Profiler · Solarwinds
before 5.1.2 · source: NVD
SM
Storage Manager · Solarwinds
before 5.1.2 · source: NVD
SP
Storage Profiler · Solarwinds
before 5.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2576
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2576
Exploit
http://www.exploit-db.com/exploits/18818
Exploit
http://www.exploit-db.com/exploits/18833
Third Party Advisory
http://www.securityfocus.com/bid/51639
Vendor Advisory
http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72680