CVE-2014-2652

CRITICO 9.8CVE-2014-2652 · Published 19/03/2018 · updated 17/06/2026

In breve

CVE-2014-2652 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda openscape deployment service (unify).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 69.2% delle vulnerabilità.
Correzione: aggiornare a 6.0 o successiva.

Package	Affected versions	Patched versions
openscape deployment service unify	`= 7.0< 6.0`	`6.0`

Description

SQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

networks.unify.com/security/advisories/OBSO-1404-01.pdf · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free