Description
IBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
Affected products
- ibm / maximo_application_suite8.10.10 – 8.10.10
- ibm / maximo_application_suite8.11.7 – 8.11.7
- ibm / maximo_application_suite9.0.0 – 9.0.0
References
Updated 41m ago · 8 sources