9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
75.8%
There is a vulnerability in the Apache Log4j open source library used by IBM OpenPages with Watson. This affects the IBM OpenPages logging framework. This vulnerability has been addressed.
CVEID:CVE-2022-23305
**DESCRIPTION:**Apache Log4j is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the JDBCAppender, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/217461 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
IBM OpenPages with Watson versions 8.1 through 8.2.0.3
A fix has been created for each affected version of the named product. Download and install the fix as soon as possible. Fixes and installation instructions are provided at the URLs listed below:
Product | Remediation |
---|
For IBM OpenPages with Watson 8.1or8.1.0.1
- Upgrade to 8.1.0.2 Fix Pack
- Apply 8.1.0.2 Interim Fix 3 (8.1.0.2.3) or later
|
<https://www.ibm.com/support/pages/openpages-watson-81-fix-pack-2>
<https://ibm.com/support/pages/openpages-watson-8102-interim-fix-3-0>
For IBM OpenPages with Watson8.1.0.2
- Apply 8.1.0.2 Interim Fix 3 (8.1.0.2.3) or later
|
<https://ibm.com/support/pages/openpages-watson-8102-interim-fix-3-0>
For IBM OpenPages with Watson8.2,8.2.0.1, 8.2.0.2 or 8.2.0.3
- Upgrade to 8.2.0.4 Fix Pack
- Apply 8.2.0.4 Interim Fix 6 (8.2.0.4.6) or later
|
<https://www.ibm.com/support/pages/openpages-watson-82-fix-pack-4>
<https://www.ibm.com/support/pages/openpages-watson-8204-interim-fix-6>
None
CPE | Name | Operator | Version |
---|---|---|---|
ibm openpages with watson | eq | 8.1 | |
ibm openpages with watson | eq | 8.2 |
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
75.8%