CVE-2007-5084

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-01 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others.

Affected products

Broadcom Brightstor Hierarchical Storage Manager: through 11.5

References

http://dvlabs.tippingpoint.com/advisory/TPTI-07-17
http://secunia.com/advisories/26914
http://securitytracker.com/id?1018747
http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692
http://www.securityfocus.com/archive/1/480808/100/0/threaded
http://www.securityfocus.com/bid/25823
http://www.vupen.com/english/advisories/2007/3275
https://exchange.xforce.ibmcloud.com/vulnerabilities/36828
http://dvlabs.tippingpoint.com/advisory/TPTI-07-17
http://secunia.com/advisories/26914
http://securitytracker.com/id?1018747

Get alerted when CVE-2007-5084 or the next vulnerability affects your stack