Description
Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users to execute arbitrary SQL commands via unspecified interfaces.
References
- JR49200 vendor-advisory
- JR48815 vendor-advisory
- ibm-infosphere-cve20134058-sqli(86547) vdb-entry
- JR49206 vendor-advisory
- 66155 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21666684