critical9.8
CVE-2019-4012
IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection.
Impact
IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Bigfix Webui Profile Management | Version 6 |
| Ibm | Bigfix Webui Software Distribution | Version 23 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=ibm10875490
- http://www.securityfocus.com/bid/108038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/155886
- http://www.ibm.com/support/docview.wss?uid=ibm10875490
- http://www.securityfocus.com/bid/108038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/155886