HIGH
IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection
Published Jun 26, 2019
8.8
HIGHCVSS 3.1
EPSS 1.36%
Description
IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240.
Affected products
-
- Version 2.2.3.0StatusaffectedConstraints-
- Version 2.2.3.1StatusaffectedConstraints-
- Version 2.2.3.2StatusaffectedConstraints-
- Version 2.2.4.0StatusaffectedConstraints-
- Version 2.2.5.0StatusaffectedConstraints-
- Version 2.2.5.1StatusaffectedConstraints-
- Version 2.2.5.2StatusaffectedConstraints-
- Version 2.2.5.3StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | PureApplication System | n/a |
|
- ≥ 2.2.3.0 · ≤ 2.2.5.3
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159240 vdb-entryx_refsource_XFVDB EntryVendor Advisory
- https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 x_refsource_CONFIRMPatchVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/159240 | vdb-entryx_refsource_XFVDB EntryVendor Advisory | |
| https://www-01.ibm.com/support/docview.wss?uid=ibm10885602 | x_refsource_CONFIRMPatchVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner ibm
Published Jun 26, 2019
Updated Sep 17, 2024
Reserved Jan 3, 2019
Link CVE-2019-4224
CISA Vulnrichment
Updated n/a