CVE-2014-2949

Description

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References

http://www.zerodayinitiative.com/advisories/ZDI-14-293/

http://www.securityfocus.com/bid/68078

http://www.kb.cert.org/vuls/id/210884

http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15310.html?sr=38021626

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS