← CVE Intelligence

CVE-2021-20451

IBM Cognos Controller SQL injection PUBLISHED

Description (CNA)

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 196643.

Affected (CNA)

Vendor / productVersions
IBM / Cognos Controlleraffected 10.4.1, 10.4.2, 11.0.0

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.