Vulnerability Database

317,107

Total vulnerabilities in the database

CVE-2014-9220

SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command.

  • Published: Dec 3, 2014
  • Updated: Nov 9, 2025
  • CVE: CVE-2014-9220
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
fedoraproject / fedora 21 21.x
openvas / openvas_manager 5.0.0-beta3 5.0.0-beta3.x
openvas / openvas_manager 5.0.0-beta11 5.0.0-beta11.x
openvas / openvas_manager 5.0.0-beta6 5.0.0-beta6.x
openvas / openvas_manager 5.0.0-beta7 5.0.0-beta7.x
openvas / openvas_manager 5.0.0-beta5 5.0.0-beta5.x
openvas / openvas_manager 5.0.0-beta13 5.0.0-beta13.x
openvas / openvas_manager 5.0.4 5.0.4.x
openvas / openvas_manager 5.0.6 5.0.6.x
openvas / openvas_manager 5.0.3 5.0.3.x
openvas / openvas_manager 5.0.0-beta8 5.0.0-beta8.x
openvas / openvas_manager 5.0.0-beta1 5.0.0-beta1.x
openvas / openvas_manager 5.0.1 5.0.1.x
openvas / openvas_manager 5.0.0-beta12 5.0.0-beta12.x
openvas / openvas_manager - 4.0.5.x
openvas / openvas_manager 5.0.5 5.0.5.x
openvas / openvas_manager 5.0.0-beta2 5.0.0-beta2.x
openvas / openvas_manager 5.0.0-beta10 5.0.0-beta10.x
openvas / openvas_manager 5.0.0-beta9 5.0.0-beta9.x
openvas / openvas_manager 5.0.0 5.0.0.x
openvas / openvas_manager 5.0.0-beta4 5.0.0-beta4.x
openvas / openvas_manager 5.0.2 5.0.2.x
opensuse / opensuse 13.2 13.2.x