{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:02:18Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20130402-CVE-2013-1163","slug":"cisco-sa-20130402-cve-2013-1163","vendor":"Cisco","title":"Cisco Connected Grid Network Management System SQL Injection Vulnerabilities","summary":"A vulnerability in device management of the Cisco Connected Grid Network Management System (CG-NMS) could allow an unauthenticated, remote attacker to modify data in the CG-NMS database by using SQL injection. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including SQL statements in an entry field. Cisco has confirmed the vulnerability in a security notice and software updates are available. To exploit the vulnerability, an attacker would need access to trusted, internal networks to send the crafted queries to the targeted system. This access requirement may reduce the likelihood of a successful attack. Customers are advised to review the bug reports in the vendor announcements section for a current list of affected versions.","severity":"Medium","published_at":"2013-04-02T13:48:26Z","updated_at":"2013-04-02T13:48:26Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130402-CVE-2013-1163","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20130402-CVE-2013-1163/csaf/Cisco-SA-20130402-CVE-2013-1163.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.01143},"cves":[{"id":"CVE-2013-1163","kev":false,"epss":{"score":0.01143,"percentile":0.63159,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Connected Grid Network Management System (CG-NMS)","slug":"cisco-connected-grid-network-management-system-cg-nms","vendor":"Cisco"},"cve":{"id":"CVE-2013-1163"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:54:49Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Connected Grid Network Management System (CG-NMS)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01143,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2013-04-02T13:48:26Z","updated_at":"2013-04-02T13:48:26Z","advisory_updated_at":"2013-04-02T13:48:26Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130402-CVE-2013-1163","row_display_order":1}]}