{"api_version":"1","generated_at":"2026-07-23T05:39:38+00:00","cve":"CVE-2010-0147","urls":{"html":"https://cve.report/CVE-2010-0147","api":"https://cve.report/api/cve/CVE-2010-0147.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-0147","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-0147"},"summary":{"title":"CVE-2010-0147","description":"SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.","state":"PUBLISHED","assigner":"cisco","published_at":"2010-02-23 20:30:00","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/38619","name":"http://secunia.com/advisories/38619","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco Security Agent Multiple Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/62444","name":"http://osvdb.org/62444","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/38272","name":"http://www.securityfocus.com/bid/38272","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Management Center for Cisco Security Agents SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1023606","name":"http://www.securitytracker.com/id?1023606","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Security Agent Management Center Input Validation Flaws Let Remote Authenticated Users Download Files and Inject SQL Commands - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2010/0416","name":"http://www.vupen.com/english/advisories/2010/0416","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56346","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56346","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Agent - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0147","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0147","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"147","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_agent","cpe6":"5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"147","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_agent","cpe6":"5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"147","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_agent","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T00:37:53.918Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"38619","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/38619"},{"name":"62444","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/62444"},{"name":"ADV-2010-0416","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/0416"},{"name":"1023606","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1023606"},{"name":"20100217 Multiple Vulnerabilities in Cisco Security Agent","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml"},{"name":"cisco-sa-mgmtcenter-sql-injection(56346)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56346"},{"name":"38272","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/38272"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-02-17T00:00:00.000Z","descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"38619","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/38619"},{"name":"62444","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/62444"},{"name":"ADV-2010-0416","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/0416"},{"name":"1023606","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1023606"},{"name":"20100217 Multiple Vulnerabilities in Cisco Security Agent","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml"},{"name":"cisco-sa-mgmtcenter-sql-injection(56346)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56346"},{"name":"38272","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/38272"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2010-0147","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"38619","refsource":"SECUNIA","url":"http://secunia.com/advisories/38619"},{"name":"62444","refsource":"OSVDB","url":"http://osvdb.org/62444"},{"name":"ADV-2010-0416","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/0416"},{"name":"1023606","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1023606"},{"name":"20100217 Multiple Vulnerabilities in Cisco Security Agent","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml"},{"name":"cisco-sa-mgmtcenter-sql-injection(56346)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56346"},{"name":"38272","refsource":"BID","url":"http://www.securityfocus.com/bid/38272"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2010-0147","datePublished":"2010-02-23T20:00:00.000Z","dateReserved":"2010-01-04T00:00:00.000Z","dateUpdated":"2024-08-07T00:37:53.918Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-02-23 20:30:00","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F6DD0915-7671-42CD-8DF3-0B685389C528"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_agent:5.2:*:*:*:*:*:*:*","matchCriteriaId":"734B38F1-6FEC-4A94-B1C9-D076750A133F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_agent:6.0:*:*:*:*:*:*:*","matchCriteriaId":"8805C68E-E152-4089-B74C-1B7703ECC064"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"147","Ordinal":"1","Title":"CVE-2010-0147","CVE":"CVE-2010-0147","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"147","Ordinal":"1","NoteData":"SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.","Type":"Description","Title":"CVE-2010-0147"},{"CveYear":"2010","CveId":"147","Ordinal":"2","NoteData":"2010-02-23","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"147","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}