VULNERABILITY INTELLIGENCE

CVE-2006-0522

CVSS score7.5 HIGH
EPSS probability2.75%
CISA KEVNot currently listed
Published2006-02-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.

Primary references