NVD

Id
31389  
Name
CVE-2014-3138  
Description
SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3 allows remote authenticated users to execute arbitrary SQL commands via the PATH_INFO to /docushare/dsweb/ResultBackgroundJobMultiple/. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-01  
Modified Date
2014-05-20  
Seq
2014-3138  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164329 31389 CVE-2014-3138 http://packetstormsecurity.com/files/126171/Xerox-DocuShare-SQL-Injection.html  View
164330 31389 CVE-2014-3138 20140415 Xerox DocuShare authenticated SQL injection  View
164331 31389 CVE-2014-3138 32886  View
164332 31389 CVE-2014-3138 66922  View
164333 31389 CVE-2014-3138 http://www.xerox.com/download/security/security-bulletin/a72cd-4f7a54ce14460/cert_XRX14-003_V1.0.pdf  View
164334 31389 CVE-2014-3138 xerox-docushare-sql-injection(92548)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13483 JVNDB-2014-002358 Xerox DocuShare における SQL インジェクションの脆弱性 Xerox DocuShare には、SQL インジェクションの脆弱性が存在します。 CVE-2014-3138 70425 CVE-2014-3138 31389 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002358.html 2014-04-22 2014-05-07 View