Описание
IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.0.0 (включая) до 4.1.1 (исключая)
Одновременно
cpe:2.3:a:ibm:aspera_orchestrator:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
EPSS
Процентиль: 32%
0.00123
Низкий
7.6 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 7.6
github
около 2 месяцев назад
IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
EPSS
Процентиль: 32%
0.00123
Низкий
7.6 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-89