CVE-2019-4147

Опубликовано: 16 сент. 2019

Источник: nvd

CVSS3: 4.7

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 158413.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/158413
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/security-bulletin-sql-injection-vulnerability-affects-ibm-sterling-file-gateway-cve-2019-4147
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/158413
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/security-bulletin-sql-injection-vulnerability-affects-ibm-sterling-file-gateway-cve-2019-4147
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*

Версия от 2.2 (включая) до 6.0.1.0 (включая)

EPSS

Процентиль: 61%

0.00413

Низкий

4.7 Medium

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-722j-57jc-52mj

CVSS3: 7.2

github

больше 3 лет назад

EPSS

Процентиль: 61%

0.00413

Низкий

4.7 Medium

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89