Описание
IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.8.4 (включая) до 4.8.5 (включая)Версия от 5.0.0 (включая) до 5.2.0.1 (исключая)
Одно из
cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*
EPSS
Процентиль: 40%
0.00185
Низкий
7.6 High
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 9.8
github
около 2 месяцев назад
IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
EPSS
Процентиль: 40%
0.00185
Низкий
7.6 High
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-89