NVD

Id
44675  
Name
CVE-2012-2998  
Description
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-09-28  
Modified Date
2013-02-13  
Seq
2012-2998  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224213 44675 CVE-2012-2998 http://esupport.trendmicro.com/solution/en-us/1061043.aspx  View
224214 44675 CVE-2012-2998 JVN#42014489  View
224215 44675 CVE-2012-2998 JVNDB-2012-000090  View
224216 44675 CVE-2012-2998 VU#950795  View
224217 44675 CVE-2012-2998 1027584  View
224218 44675 CVE-2012-2998 http://www.spentera.com/2012/09/trend-micro-control-manager-sql-injection-vulnerability/  View
224219 44675 CVE-2012-2998 http://www.trendmicro.com/ftp/documentation/readme/readme_critical_patch_TMCM55_1823.txt  View
224220 44675 CVE-2012-2998 http://www.trendmicro.com/ftp/documentation/readme/readme_critical_patch_tmcm60_patch1_1449.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25268 JVNDB-2012-000090 Trend Micro Control Manager における SQL インジェクションの脆弱性 トレンドマイクロ株式会社が提供する Trend Micro Control Manager には、SQL インジェクションの脆弱性が存在します。 CVE-2012-2998 56236 CVE-2012-2998 44675 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000090.html 2012-09-27 2012-09-27 View