CVE-2015-8261

Critical

Published: 08/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before version 16.4 does not properly validate serialized XML objects, allowing remote attackers to conduct SQL injection attacks via a crafted SOAP request.

Risk Assessment

Attackers may gain access to sensitive data in the database, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to upgrade Ipswitch WhatsUp Gold to version 16.4 or later to mitigate this vulnerability.

Original NVD description (English source)

The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks via a crafted SOAP request.