CVE-2016-3046

Опубликовано: 01 фев. 2017

Источник: nvd

CVSS3: 2.7

CVSS2: 4

EPSS Низкий

Описание

IBM Security Access Manager for Web is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements which could allow the attacker to view information in the back-end database.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg21995527
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95104
Third Party Advisory
VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg21995527
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95104
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:security_access_manager_for_web_appliance:8.0:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:ibm:security_access_manager_for_mobile:*:*:*:*:*:*:*:*

cpe:2.3:h:ibm:security_access_manager_for_mobile_appliance:8.0:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:ibm:security_access_manager_9.0_firmware:*:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00115

Низкий

2.7 Low

CVSS3

4 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-w4vg-xqpc-cc8m

CVSS3: 2.7

github

больше 3 лет назад

EPSS

Процентиль: 31%

0.00115

Низкий

2.7 Low

CVSS3

4 Medium

CVSS2

Дефекты

CWE-89