SQL Injection Vulnerability in IBM Insights Foundation for Energy
CVE-2017-1311
8.8HIGH
Summary
The IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection attacks. This security flaw allows remote attackers to execute specially crafted SQL statements against the database, potentially enabling them to view, modify, add, or delete sensitive information. As a result, this vulnerability may compromise the integrity and confidentiality of the underlying data, posing serious risks to organizations relying on this platform for energy insights.
Affected Version(s)
Insights Foundation for Energy 2.0
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved