Unscored CVE-2011-1343 EUVD-2011-1350GHSA-5p32-34xx-jmq8

SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL co…

Published Mar 9, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."

References

tivoli-netcool-webgui-sql-injection(65767) vdb-entry
ADV-2011-0550 vdb-entry
http://www.ibm.com/support/docview.wss?uid=swg24029093
IZ83269 vendor-advisory
43577 third-party-advisory