Security Advisory
CVE-2014-3326
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCup26957.