CVE catalog
CVE-2013-5321
UBUNTU-CVE-2013-5321
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.37% · Oct 25, 2026
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4] parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5) port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | ossim | 16.04 | 1.8.16-4ubuntu1 | vulnerable |
| Ubuntu | ossim | 18.04 | 1.8.20.3+ds-5build1 | vulnerable |
| Ubuntu | ossim | 18.04 | 2.2.0-1 | vulnerable |
| Ubuntu | ossim | 18.04 | 2.2.1-1 | vulnerable |
| Ubuntu | ossim | 18.04 | 2.2.2-1 | vulnerable |
| Ubuntu | ossim | 20.04 | 2.9.0-1 | vulnerable |
| Ubuntu | ossim | 20.04 | 2.9.1-2 | vulnerable |
| Ubuntu | ossim | 20.04 | 2.9.1-2build1 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: