CVE Database · CVE-2014-2587
CVSS v3.1
N/A
EPSS
3.14%
Published
Mar 24, 2014
Modified
May 6, 2026
Public PoC / Exploit (2)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka user parameter).
Weaknesses (CWE)
Affected Products (1)
References (14)