Skip to content
OpenAdvisories
Medium · 6.3 CVE-2019-4224 EUVD-2019-13831GHSA-9hhh-wwq4-2mmv

IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL state…

Published Jun 26, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240.

Affected products

VendorProductAffectedFixed
IBM PureApplication System 2.2.3.0, 2.2.3.1, 2.2.3.2, 2.2.4.0, 2.2.5.0, 2.2.5.1, 2.2.5.2, 2.2.5.3 —

References