| Package | Affected versions | Patched versions |
|---|---|---|
| identity driven manager | = 4.0 | |
| procurve manager | = 3.20= 4.0 |
Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free