CVE-2011-2546

SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669.

Severity	MEDIUM
CVSS	5.0
CWE	CWE-89
KEV
Published	14 years ago
Modified	2 weeks ago

Related Products

Product	Advisory
Cisco Nexus Dashboard	Cisco-SA-20110720-CVE-2011-2546
Cisco Application Centric Infrastructure Virtual Edge	Cisco-SA-20110720-CVE-2011-2546
Cisco SA500 Series Security Appliance	Cisco-SA-20110720-CVE-2011-2546