CVE-2016-0249

Опубликовано: 16 окт. 2016

Источник: nvd

CVSS3: 8.6

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21990363
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93339
http://www-01.ibm.com/support/docview.wss?uid=swg21990363
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93339

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_guardium:*:*:*:*:*:*:*:*

Версия до 8.2 (включая)

cpe:2.3:a:ibm:security_guardium:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:9.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00408

Низкий

8.6 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-rrh9-jpqp-xx8r