Sql injection

2020-02-2017:15:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%

JSON

IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 173348.

CPENameOperatorVersion
emptoris_spend_analysisge10.1.3.0
emptoris_spend_analysislt10.1.3.29
emptoris_spend_analysisge10.1.1.0
emptoris_spend_analysislt10.1.1.33
emptoris_spend_analysisge10.1.0.0
emptoris_spend_analysislt10.1.0.34
emptoris_strategic_supply_management_platformge10.1.3.0
emptoris_strategic_supply_management_platformlt10.1.3.29
emptoris_strategic_supply_management_platformge10.1.1.0
emptoris_strategic_supply_management_platformlt10.1.1.33

Name	Operator	Version
emptoris_spend_analysis	ge	10.1.3.0
emptoris_spend_analysis	lt	10.1.3.29
emptoris_spend_analysis	ge	10.1.1.0
emptoris_spend_analysis	lt	10.1.1.33
emptoris_spend_analysis	ge	10.1.0.0
emptoris_spend_analysis	lt	10.1.0.34
emptoris_strategic_supply_management_platform	ge	10.1.3.0
emptoris_strategic_supply_management_platform	lt	10.1.3.29
emptoris_strategic_supply_management_platform	ge	10.1.1.0
emptoris_strategic_supply_management_platform	lt	10.1.1.33