Skip to content
OpenAdvisories
Medium WID-SEC-2024-1714 1 CVE

IBM InfoSphere Information Server: Schwachstelle ermöglicht SQL Injection

Published Jul 25, 2024 · Updated Jul 25, 2024 · de-DE

Vendor: IBM Product: InfoSphere Information Server Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM InfoSphere Information Server ausnutzen, um Daten zu manipulieren.

Product

IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.

Vulnerabilities 1

  • Medium 6.0
    CVE-2024-40689

    IBM InfoSphere Information Server SQL injection

    IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. IBM X-Force ID: 297719.

    IBM InfoSphere Information Server

Revision history

  1. #1

    Initiale Fassung

References