Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4328

Опубликовано: 03 авг. 2020
Источник: nvd
CVSS3: 6.3
CVSS3: 6.3
CVSS2: 6.5
EPSS Низкий

Описание

IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ibm:financial_transaction_manager_for_multiplatform:3.2.4:*:*:*:*:*:*:*

EPSS

Процентиль: 43%
0.00209
Низкий

6.3 Medium

CVSS3

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

github
больше 3 лет назад

IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839.

EPSS

Процентиль: 43%
0.00209
Низкий

6.3 Medium

CVSS3

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89