CVE-2010-0147

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-02-23 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected products

Cisco Security Agent: 5.1, 5.2, 6.0

References

http://osvdb.org/62444
http://secunia.com/advisories/38619
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml
http://www.securityfocus.com/bid/38272
http://www.securitytracker.com/id?1023606
http://www.vupen.com/english/advisories/2010/0416
https://exchange.xforce.ibmcloud.com/vulnerabilities/56346
http://osvdb.org/62444
http://secunia.com/advisories/38619
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml
http://www.securityfocus.com/bid/38272
http://www.securitytracker.com/id?1023606

Get alerted when CVE-2010-0147 or the next vulnerability affects your stack