CVE-2014-8499
Last modified
CVE-2014-8499 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1) SQLAdvancedALSearchResult.cc or (2) AdvancedSearchResult.cc.. EPSS estimates a 33.59% chance of exploitation in the next 30 days.
Description
Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1) SQLAdvancedALSearchResult.cc or (2) AdvancedSearchResult.cc.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Manageengine | Password Manager Pro | <= 7.1 | Build 7104 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-8499?
How severe is CVE-2014-8499?
How do I fix CVE-2014-8499?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-8492Multiple cross-site scripting (XSS) vulnerabilities in asset…
- CVE-2014-8493ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote at…
- CVE-2014-8494ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Ful…
- CVE-2014-8495Citrix XenMobile MDX Toolkit before 9.0.4, when used to wrap…
- CVE-2014-8496Digicom DG-5514T ADSL router with firmware 3.2 generates pre…
- CVE-2014-8498SQL injection vulnerability in BulkEditSearchResult.cc in Ma…
- CVE-2014-8500ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.…
- CVE-2014-8501The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in G…
- CVE-2014-8502Heap-based buffer overflow in the pe_print_edata function in…
- CVE-2014-8503Stack-based buffer overflow in the ihex_scan function in bfd…
- CVE-2014-8504Stack-based buffer overflow in the srec_scan function in bfd…
- CVE-2014-8505Multiple cross-site scripting (XSS) vulnerabilities in Etiko…
Are you affected by CVE-2014-8499?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST