CVE-2014-2587
published 2014-03-24CVE-2014-2587: SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via…
PriorityP343medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
3.14%
86.3th percentile
SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka user parameter).
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mcafee | asset_manager | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
McAfee Asset Manager 6.6 sql injection (Exploit 125775 / EDB-32368)
vuldb·2026-05-08·CVSS 6.5
CVE-2014-2587 [MEDIUM] McAfee Asset Manager 6.6 sql injection (Exploit 125775 / EDB-32368)
A vulnerability has been found in McAfee Asset Manager 6.6 and classified as critical. Affected is an unknown function. This manipulation causes sql injection.
The identification of this vulnerability is CVE-2014-2587. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
GHSA
GHSA-hc48-4j8c-2qfp: SQL injection vulnerability in jsp/reports/ReportsAudit
ghsa_unreviewed·2022-05-17
CVE-2014-2587 [MEDIUM] CWE-89 GHSA-hc48-4j8c-2qfp: SQL injection vulnerability in jsp/reports/ReportsAudit
SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka user parameter).
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.htmlhttp://seclists.org/fulldisclosure/2014/Mar/325http://www.exploit-db.com/exploits/32368http://www.osvdb.org/104634http://www.securityfocus.com/bid/66302http://www.securitytracker.com/id/1029927https://exchange.xforce.ibmcloud.com/vulnerabilities/91929http://packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.htmlhttp://seclists.org/fulldisclosure/2014/Mar/325http://www.exploit-db.com/exploits/32368http://www.osvdb.org/104634http://www.securityfocus.com/bid/66302http://www.securitytracker.com/id/1029927https://exchange.xforce.ibmcloud.com/vulnerabilities/91929
2014-03-24
Published