Security Advisory

CVE-2011-1653

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-04-15 19:00:00

Last updated 2024-08-06 22:37:24

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.

← Browse all CVEs View on cve.org ↗