{"api_version":"1","generated_at":"2026-07-23T05:43:46+00:00","cve":"CVE-2007-5084","urls":{"html":"https://cve.report/CVE-2007-5084","api":"https://cve.report/api/cve/CVE-2007-5084.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-5084","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-5084"},"summary":{"title":"CVE-2007-5084","description":"Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-10-01 20:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692","name":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"CA BrightStor Hierarchical Storage Manager CsAgent arbitrary code execution vulnerabilities - CA","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26914","name":"http://secunia.com/advisories/26914","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"CA BrightStor Hierarchical Storage Manager CsAgent Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp","name":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://securitytracker.com/id?1018747","name":"http://securitytracker.com/id?1018747","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: CA BrightStor Hierarchical Storage Manager Bugs Let Remote Users Inject SQL Commands or Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded","name":"http://www.securityfocus.com/archive/1/480808/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/3275","name":"http://www.vupen.com/english/advisories/2007/3275","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36828","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36828","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-17","name":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-17","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TippingPoint | DVLabs |","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25823","name":"http://www.securityfocus.com/bid/25823","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Computer Associates BrightStor Hierarchical Storage Manager CsAgent Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-5084","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5084","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"5084","vulnerable":"1","versionEndIncluding":"11.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"broadcom","cpe5":"brightstor_hierarchical_storage_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:17:28.214Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"26914","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26914"},{"name":"20070927 [CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded"},{"name":"ADV-2007-3275","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/3275"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692"},{"name":"25823","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25823"},{"name":"ca-brightstor-csagent-sql-injection(36828)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36828"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp"},{"name":"1018747","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1018747"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-17"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-09-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"26914","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26914"},{"name":"20070927 [CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded"},{"name":"ADV-2007-3275","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/3275"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692"},{"name":"25823","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25823"},{"name":"ca-brightstor-csagent-sql-injection(36828)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36828"},{"tags":["x_refsource_CONFIRM"],"url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp"},{"name":"1018747","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1018747"},{"tags":["x_refsource_MISC"],"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-17"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-5084","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"26914","refsource":"SECUNIA","url":"http://secunia.com/advisories/26914"},{"name":"20070927 [CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded"},{"name":"ADV-2007-3275","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3275"},{"name":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692","refsource":"CONFIRM","url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692"},{"name":"25823","refsource":"BID","url":"http://www.securityfocus.com/bid/25823"},{"name":"ca-brightstor-csagent-sql-injection(36828)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36828"},{"name":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp","refsource":"CONFIRM","url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp"},{"name":"1018747","refsource":"SECTRACK","url":"http://securitytracker.com/id?1018747"},{"name":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-17","refsource":"MISC","url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-17"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-5084","datePublished":"2007-10-01T20:00:00.000Z","dateReserved":"2007-09-25T00:00:00.000Z","dateUpdated":"2024-08-07T15:17:28.214Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-10-01 20:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_hierarchical_storage_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"11.5","matchCriteriaId":"7F3BF860-8EF3-42D6-B6A3-8E6A8DAFDF26"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"5084","Ordinal":"1","Title":"CVE-2007-5084","CVE":"CVE-2007-5084","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"5084","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others.","Type":"Description","Title":"CVE-2007-5084"},{"CveYear":"2007","CveId":"5084","Ordinal":"2","NoteData":"2007-10-01","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"5084","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}