high8.5
CVE-2024-52899
IBM Data Virtualization Manager for z/OS 1.1 and 1.2 could allow an authenticated user to inject malicious JDBC URL parameters and execute code on the server.
Impact
IBM Data Virtualization Manager for z/OS 1.1 and 1.2 could allow an authenticated user to inject malicious JDBC URL parameters and execute code on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Data Virtualization Manager For Z\/Os | Versions 1.1, 1.2 |