CVE-2012-3834

SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security...

6.5 MediumPublic exploit

SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter.

Exploit likelihood

1.44%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 6.5

Record: CVE-2012-3834
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-3834
Updated: 2026-11-02

EUVDEUVD-2012-3781 No score

Record: EUVD-2012-3781
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wcq8-87g7-jxwc No score

SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security...

Record: GHSA-wcq8-87g7-jxwc
Weakness: CWE-89
Updated: 2026-11-02

Affected products

alienvault open source security information management

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities	2012-04-29
Exploit-DB	Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection	2012-07-23

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-3834 is a medium vulnerability (CVSS 6.5) in Alienvault Open Source Security Information Management, published July 3, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. No source names a fixed version.