SQL Injection Vulnerability in IBM Insights Foundation for Energy
CVE-2017-1311

8.8HIGH

Key Information:

Vendor
IBM
Status
Insights Foundation For Energy
Vendor
CVE Published:
3 October 2017

Summary

The IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection attacks. This security flaw allows remote attackers to execute specially crafted SQL statements against the database, potentially enabling them to view, modify, add, or delete sensitive information. As a result, this vulnerability may compromise the integrity and confidentiality of the underlying data, posing serious risks to organizations relying on this platform for energy insights.

Affected Version(s)

Insights Foundation for Energy 2.0

References

http://www.ibm.com/support/docview.wss?uid=swg22009039
x_refsource_CONFIRM
http://www.securityfocus.com/bid/101058
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/125719
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.