CVE-2013-5321

CVE-2013-5321 describes multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1. These flaws allow remote attackers to execute arbitrary SQL commands through various parameters in forensics and vulnmeter components. With a CVSS score of 7.5, this vulnerability is considered high severity, indicating a network-based attack with low complexity that could lead to partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.