Description (CNA)
IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145109.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Business Process Manager | affected 8.5; affected 8.5.0.1; affected 8.5.5; affected 8.5.6; affected 8.5.7; affected 8.6; affected 8.6.0.CF201712; affected 8.5.0.2; affected 8.5.6.1; affected 8.5.6.2; affected 8.5.7.CF201606; affected 8.5.7.CF201609; affected 8.5.7.CF201612; affected 8.5.7.CF201703; affected 8.5.7.CF201706; affected 8.6.0.CF201803; affected 18.0.0.0; affected 18.0.0.1 |
CWE
No CWE identifiers supplied.
References
- http://www.securitytracker.com/id/1041717
- https://exchange.xforce.ibmcloud.com/vulnerabilities/145109
- https://www.ibm.com/support/docview.wss?uid=ibm10720035
ADP enrichment
No English description supplied.