CVE-2012-2576

Critical

Published: 20/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

There is an SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager, Storage Profiler, and Backup Profiler before version 5.1.2. This allows remote attackers to execute arbitrary SQL commands via the loginName field.

Risk Assessment

This vulnerability could lead to unauthorized access to the database, posing a serious threat to the integrity and confidentiality of organizational data.

Recommendation

It is recommended to upgrade to version 5.1.2 or later to mitigate this vulnerability and to conduct a security audit of the application.

Original NVD description (English source)

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.