CVE-2015-1605

high · 7.5

Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) GetClientPackage.aspx or (2) GetProcessedPackage.aspx.

7.5

CVSS

17.6%

EPSS (exploit prob.)

97th

EPSS percentile

2015-02-24

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
dell	asset_manager	<= 9.0.0

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/72697
http://www.zerodayinitiative.com/advisories/ZDI-15-048/
http://www.zerodayinitiative.com/advisories/ZDI-15-049/
http://www.securityfocus.com/bid/72697
http://www.zerodayinitiative.com/advisories/ZDI-15-048/
http://www.zerodayinitiative.com/advisories/ZDI-15-049/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-1605