Lucene search
K

241 matches found

Prion
Prion
added 2020/02/26 4:15 p.m.20 views

Sql injection

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167881...

6.5CVSS6.6AI score0.00835EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/26 3:55 p.m.29 views

CVE-2019-4597

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167880...

6.3CVSS6.6AI score0.00835EPSS
Exploits0References2
CNVD
CNVD
added 2020/02/26 12:0 a.m.4 views

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2020-14330)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection vulnerability exists in IBM Sterling B2B...

6.5CVSS7.8AI score0.00835EPSS
Exploits0References1
CNVD
CNVD
added 2020/01/10 12:0 a.m.5 views

IBM Jazz Reporting Service SQL Injection Vulnerability

IBM Jazz Reporting Service JRS is a suite of ready-to-use reporting components from IBM in the United States. The product includes features such as report generation, data collection and lifecycle queries. A SQL injection vulnerability exists in IBM JRS version 6.0.6.1. A remote attacker can...

9.8CVSS7.7AI score0.01367EPSS
Exploits0References1
OSV
OSV
added 2020/01/09 5:15 p.m.4 views

CVE-2019-4651

IBM Jazz Reporting Service JRS 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170962...

9.8CVSS6.4AI score0.01367EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/01/09 5:0 p.m.26 views

CVE-2019-4651

IBM Jazz Reporting Service JRS 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170962...

5.4CVSS9.2AI score0.01367EPSS
Exploits0References2
OSV
OSV
added 2019/11/08 6:15 p.m.6 views

CVE-2019-16207

Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges...

7.8CVSS7.1AI score0.00254EPSS
Exploits0References1
OSV
OSV
added 2019/09/16 7:15 p.m.6 views

CVE-2019-4147

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 158413...

7.2CVSS6.2AI score0.01265EPSS
Exploits0References2
Prion
Prion
added 2019/09/16 7:15 p.m.18 views

Sql injection

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 158413...

6.5CVSS7.1AI score0.01265EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2019/08/20 7:15 p.m.20 views

CVE-2019-4481

IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IB...

9.8CVSS8.2AI score0.01959EPSS
Exploits0References2
CNVD
CNVD
added 2019/08/07 12:0 a.m.4 views

IBM Sterling File Gateway SQL Injection Vulnerability

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. An SQL injection vulnerability exists in IBM Sterling File...

7.2CVSS7.6AI score0.01265EPSS
Exploits0References1
OSV
OSV
added 2019/06/26 3:15 p.m.4 views

CVE-2019-4224

IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240...

8.8CVSS6.8AI score0.01364EPSS
Exploits0References2
NVD
NVD
added 2019/06/26 3:15 p.m.25 views

CVE-2019-4224

IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240...

8.8CVSS7.1AI score0.01364EPSS
Exploits0References2
Prion
Prion
added 2019/06/26 3:15 p.m.13 views

Sql injection

IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240...

6.5CVSS8.5AI score0.01364EPSS
Exploits0References2Affected Software1
Veracode
Veracode
added 2019/05/27 12:56 a.m.26 views

SQL Injection

Foreman is vulnerable to SQL injection. An input sanitization flaw in the id field in the dashboard controller allows remote unauthenticated attackers to perform SQL injection on the back end database...

6.5CVSS8.8AI score0.01378EPSS
Exploits0References91Affected Software221
NVD
NVD
added 2019/04/10 3:29 p.m.26 views

CVE-2018-1994

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 154494...

9.8CVSS7.2AI score0.01551EPSS
Exploits0References2
NVD
NVD
added 2019/03/05 6:29 p.m.19 views

CVE-2019-4032

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998...

9.8CVSS7.2AI score0.01551EPSS
Exploits0References2
Prion
Prion
added 2019/03/05 6:29 p.m.15 views

Sql injection

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998...

7.5CVSS9.5AI score0.01551EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/03/05 6:0 p.m.25 views

CVE-2019-4032

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998...

6.3CVSS9.6AI score0.01551EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2019/02/22 8:30 p.m.20 views

Security Bulletin: IBM Maximo Asset Management is vulnerable to SQL injection (CVE-2018-1699)

Summary IBM Maximo Asset Management is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Vulnerability Details CVEID: CVE-2018-1699 DESCRIPTION: IBM Maximo...

8.8CVSS1.1AI score0.01695EPSS
Exploits0Affected Software8
Rows per page
Query Builder