CVE-2013-4058 — SQL Injection in IBM Infosphere Information Server

CWE-89 — SQL Injection3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 33.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Infosphere Information Server
Timeline
PublishedMar 16
Latest updateMay 17

Description

Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users to execute arbitrary SQL commands via unspecified interfaces.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-3r3x-2xg7-c268: Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8↗2022-05-17
▶
CVEList
CVE-2013-4058: Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8↗2014-03-16
▶
CVE-2013-4058 — SQL Injection in IBM | cvebase