8.5
High
CVE-2024-52899 IBM Data Virtualization Manager for z/OS 1.1 and 1.2 could allow an authenticated user to inject malicious JDBC URL…
Description
IBM Data Virtualization Manager for z/OS 1.1 and 1.2 could allow an authenticated user to inject malicious JDBC URL parameters and execute code on the server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Data Virtualization Manager for z/OS | Versions not published | |
| data_virtualization_manager_for_z-os | 1.2 | No fix stated |
| data_virtualization_manager_for_z-os | 1.1 | No fix stated |