critical9.8
CVE-2023-26550
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field.
Impact
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bmc | Control-M | before 9.0.20.214 |