7.5
Élevée
CVE-2018-1756 IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection
Description
IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, information in the back-end database. IBM X-Force ID: 148599.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Identity Governance and Intelligence 5.2 | 5.2.3.2 → 5.2.4 | Pas de correctif indiqué |
Autres CVE de Security Identity Governance and Intelligence
Les 38 CVE de Security Identity Governance and Intelligence →
CVE-2020-4970
IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain…
5.3
Moyenne
CVE-2020-4957
IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that…
5.3
Moyenne
CVE-2020-4996
IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the…
6.5
Moyenne
CVE-2020-4995
IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a…
4.0
Moyenne