Approved changes feed: RSS · Atom

cpe:2.3:a:alienvault:open_source_security_information_management:4.2.2:*:*:*:*:*:*:*

part: a version: 4.2.2 update: *

VendorAlienvault (d51cdd55-2f5a-537b-8b4f-3f5508c62127)
ProductOpen Source Security Information Management (c424aed5-7bae-51d4-809e-50370ba8bb95)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/alienfault/ossim purl2cpe 2026-06-01 10:12:38.921760
pkg:sourceforge/os-sim purl2cpe 2026-06-01 10:12:38.921762

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5383 vulnerable 2026-06-08 05:05:47.763250 Details available
SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Published: 2014-08-21T14:00:00.000Z
Updated: 2024-08-06T11:41:49.070Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5210 vulnerable 2026-06-08 05:05:47.177326 Details available
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.
Published: 2014-08-21T14:00:00.000Z
Updated: 2024-08-06T11:41:47.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5159 vulnerable 2026-06-08 05:05:47.054503 Details available
SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter.
Published: 2014-08-21T14:00:00.000Z
Updated: 2024-08-06T11:34:37.482Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5158 vulnerable 2026-06-08 05:05:47.053057 Details available
The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors.
Published: 2014-08-21T14:00:00.000Z
Updated: 2024-08-06T11:34:37.653Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3805 vulnerable 2026-06-08 05:05:42.831230 Details available
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_license, (2) get_log_line, or (3) update_system/upgrade_pro_web request, a different vulnerability than CVE-2014-3804.
Published: 2014-06-13T14:00:00.000Z
Updated: 2024-08-06T10:57:17.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3804 vulnerable 2026-06-08 05:05:42.826214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5967 vulnerable 2026-06-08 05:04:54.919843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5300 vulnerable 2026-06-08 05:04:51.130332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.