CVE-2010-0147: SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 be...

Security readout for executives and security teams

This flaw lets an authenticated remote user run arbitrary SQL commands against Cisco Security Agent Management Center. That could expose or alter management data in a security control system. The sources do not provide CVSS scoring, exploit details, or active exploitation evidence. Exposure is likely limited to environments still running legacy Cisco Security Agent Management Center with authenticated access available to users or compromised accounts. Internet exposure is not stated in the sources and should not be assumed. Prioritize promptly if this legacy Cisco management product is still present. The issue affects a security administration platform and allows database command execution, but urgency depends on authenticated access exposure and upgrade feasibility. Mitigation focus: Upgrade to Cisco fixed versions named in the advisory or later supported releases.; Restrict Management Center access to trusted administrative networks and users.; Review Cisco’s advisory for product-specific upgrade and workaround guidance..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.