Sql injection

2019-09-1619:15:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.2%

JSON

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 158413.

CPENameOperatorVersion
sterling_file_gatewayge2.2
sterling_file_gatewayle6.0.1.0

CPE	Name	Operator	Version
	sterling_file_gateway	ge	2.2
	sterling_file_gateway	le	6.0.1.0

References

exchange.xforce.ibmcloud.com/vulnerabilities/158413

www.ibm.com/support/pages/security-bulletin-sql-injection-vulnerability-affects-ibm-sterling-file-gateway-cve-2019-4147