SQL Injection Vulnerability in IBM PureApplication System
CVE-2019-4224

6.3MEDIUM

Key Information:

Vendor

IBM
Status
Pureapplication System
Vendor
CVE Published:
26 June 2019

What is CVE-2019-4224?

The IBM PureApplication System versions 2.2.3.0 through 2.2.5.3 are susceptible to SQL injection, allowing remote attackers to send malicious SQL queries. This security weakness can provide unauthorized access to view, add, modify, or delete sensitive information within the back-end database, leading to potential data breaches. Organizations utilizing these affected versions should urgently implement the necessary security measures to safeguard their databases.

Affected Version(s)

PureApplication System 2.2.3.0

PureApplication System 2.2.3.1

PureApplication System 2.2.3.2

References

https://www-01.ibm.com/support/docview.wss?uid=ibm10885602
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/159240
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.