CVE-2011-4349

MEDIUM · CVSS 4.6 EPSS 0.46%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-12-10 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2011-4349

Severity

MEDIUM

CVSS

4.6

EPSS

0.46%

Original Filing — NVD Description

Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.