{"api_version":"1","generated_at":"2026-07-23T08:57:13+00:00","cve":"CVE-2013-1613","urls":{"html":"https://cve.report/CVE-2013-1613","api":"https://cve.report/api/cve/CVE-2013-1613.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-1613","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-1613"},"summary":{"title":"CVE-2013-1613","description":"SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.","state":"PUBLISHED","assigner":"symantec","published_at":"2013-07-08 17:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.7","severity":"","vector":"AV:A/AC:L/Au:M/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:A/AC:L/Au:M/C:P/I:P/A:P","baseScore":4.7,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"MULTIPLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00","name":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisories Relating to Symantec Products - Symantec Security Information Manager Console Security Issues - 2013-07-01T11:55:25 PDT | Symantec","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/60796","name":"http://www.securityfocus.com/bid/60796","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Symantec Security Information Manager CVE-2013-1613 SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1613","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1613","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"security_information_manager","cpe6":"4.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"security_information_manager","cpe6":"4.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"security_information_manager","cpe6":"4.7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"security_information_manager","cpe6":"4.7.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"security_information_manager","cpe6":"4.7.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"security_information_manager","cpe6":"4.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"1613","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"symantec","cpe5":"security_information_manager_appliance","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T15:04:49.542Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00"},{"name":"60796","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/60796"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-07-08T17:00:00.000Z","orgId":"80d3bcb6-88de-48c2-a47e-aebf795f19b5","shortName":"symantec"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00"},{"name":"60796","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/60796"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@symantec.com","ID":"CVE-2013-1613","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00","refsource":"CONFIRM","url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00"},{"name":"60796","refsource":"BID","url":"http://www.securityfocus.com/bid/60796"}]}}}},"cveMetadata":{"assignerOrgId":"80d3bcb6-88de-48c2-a47e-aebf795f19b5","assignerShortName":"symantec","cveId":"CVE-2013-1613","datePublished":"2013-07-08T17:00:00.000Z","dateReserved":"2013-02-04T00:00:00.000Z","dateUpdated":"2024-09-16T17:33:39.344Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-07-08 17:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:M/C:P/I:P/A:P","baseScore":4.7,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"MULTIPLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.1,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:security_information_manager:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"967A396D-A201-4CDC-8195-B242B7C09896"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:security_information_manager:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"EA39F2EB-A426-4E16-AC82-0B2024E2755F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:security_information_manager:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"DEA47E86-6722-4812-9323-B9158B263A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:security_information_manager:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"C90F6954-C28D-4F03-AF53-ED0B38056828"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:security_information_manager:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5DA66B6A-D6CE-4C47-9B2A-8F2C53BDD40C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:security_information_manager:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"2CDD7629-C998-4B8F-B424-4093B671E961"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:security_information_manager_appliance:-:*:*:*:*:*:*:*","matchCriteriaId":"768F8400-0E0C-4A5D-8E70-F231C6A400C3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"1613","Ordinal":"1","Title":"CVE-2013-1613","CVE":"CVE-2013-1613","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"1613","Ordinal":"1","NoteData":"SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.","Type":"Description","Title":"CVE-2013-1613"},{"CveYear":"2013","CveId":"1613","Ordinal":"2","NoteData":"2013-07-08","Type":"Other","Title":"Published"}]}}}