5 matches found
CVE-2023-26550
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
Sql injection
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
PT-2023-20724
Name of the Vulnerable Software and Affected Versions BMC Control-M versions prior to 9.0.20.214 Description A SQL injection issue allows attackers to execute arbitrary SQL commands via the memname JSON field. Recommendations For versions prior to 9.0.20.214, update to version 9.0.20.214 or later...
CVE-2023-26550: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
