7.5
High
CVE-2018-1756 IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection
Description
IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, information in the back-end database. IBM X-Force ID: 148599.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Identity Governance and Intelligence 5.2 | 5.2.3.2 → 5.2.4 | No fix stated |
Other CVEs of Security Identity Governance and Intelligence
The 38 CVEs of Security Identity Governance and Intelligence →
CVE-2020-4970
IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain…
5.3
Medium
CVE-2020-4957
IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that…
5.3
Medium
CVE-2020-4996
IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the…
6.5
Medium
CVE-2020-4995
IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a…
4.0
Medium