CVE-2024-40689

CWE-89 — SQL Injection3 documents3 sources

Severity

9.8CRITICAL

EPSS

0.1%

top 66.02%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Infosphere Information Server IBM Infosphere Information Server ON Cloud

Timeline

PublishedJul 26

Description

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. IBM X-Force ID: 297719.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:LExploitability: 1.2 | Impact: 4.7

Affected Packages3 packages

▶CVEListV5ibm/infosphere_information_server11.7

▶NVDibm/infosphere_information_server11.7

▶NVDibm/infosphere_information11.7

🔴Vulnerability Details

CVEList

IBM InfoSphere Information Server SQL injection↗2024-07-26

▶

GHSA

GHSA-ggqv-qggh-5p8q: IBM InfoSphere Information Server 11↗2024-07-26

▶