cbcvebase.
CVE-2011-1343
published 2011-03-09

CVE-2011-1343: SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic…

PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.12%
62.3th percentile
SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."

Affected

20 ranges
VendorProductVersion rangeFixed in
ibmtivoli_netcool_omnibus<= 7.2.1.10—
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
ibmtivoli_netcool_omnibus——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.