CVE-2014-2587: McAfee Asset Manager

Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report (aka user parameter).

Affected products

• McAfee Asset Manager: version 6.6 only

Published 2014-03-24. Last modified 2026-06-17.