CVE-2015-1989: SQL Injection
Published Nov 8, 2015
·Updated
SQL injection vulnerability in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected Software
6 affected components
IBM Security QRadar Incident Forensics=7.2.0
IBM Security QRadar Incident Forensics=7.2.1
IBM Security QRadar Incident Forensics=7.2.2
IBM Security QRadar Incident Forensics=7.2.3
IBM Security QRadar Incident Forensics=7.2.4
IBM Security QRadar Incident Forensics=7.2.5
Event History
Nov 8, 2015
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1989?
CVE-2015-1989 is rated as a medium severity vulnerability due to its potential impact on database security.
2
How do I fix CVE-2015-1989?
To mitigate CVE-2015-1989, upgrade IBM Security QRadar Incident Forensics to version 7.2.5 Patch 5 or later.
3
Which versions of IBM Security QRadar Incident Forensics are affected by CVE-2015-1989?
Versions 7.2.0 to 7.2.4 of IBM Security QRadar Incident Forensics are affected by CVE-2015-1989.
4
What type of vulnerability is CVE-2015-1989?
CVE-2015-1989 is an SQL injection vulnerability that allows remote authenticated users to execute arbitrary SQL commands.
5
What should I do if I am using an affected version of IBM Security QRadar Incident Forensics?
If you are using an affected version, you should promptly apply the available patches to prevent exploitation of CVE-2015-1989.