CVE-2018-1819

CWE-89 — SQL Injection3 documents3 sources

Severity

8.8HIGH

EPSS

0.4%

top 36.60%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Financial Transaction Manager

Timeline

PublishedOct 4

Latest updateMay 13

Description

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 150023.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

▶CVEListV5ibm/financial_transaction_manager5 versions+4

▶NVDibm/financial_transaction_manager9 versions+8

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-wc7q-37v7-9rjh: IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3↗2022-05-13

▶

CVEList

CVE-2018-1819: IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3↗2018-10-04

▶