low2.7
CVE-2016-3046
IBM Security Access Manager for Web is vulnerable to SQL injection.
Impact
IBM Security Access Manager for Web is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements which could allow the attacker to view information in the back-end database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Security Access Manager For Web 8.0 Firmware | All versions |
| Ibm | Security Access Manager For Mobile | All versions |
| Ibm | Security Access Manager 9.0 Firmware | All versions |