CVE-2015-5023: SQL Injection
Published Jan 3, 2016
·Updated
SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected Software
7 affected components
IBM Curam Social Program Management=6.0
IBM Curam Social Program Management=6.0.1
IBM Curam Social Program Management=6.0.2
IBM Curam Social Program Management=6.0.3
IBM Curam Social Program Management=6.0.4
IBM Curam Social Program Management=6.0.5
IBM Curam Social Program Management=6.1
Event History
Jan 3, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5023?
CVE-2015-5023 is classified as a critical severity vulnerability that allows SQL injection.
2
How do I fix CVE-2015-5023?
To fix CVE-2015-5023, you should upgrade to IBM Curam Social Program Management version 6.1.1 or later.
3
Who is affected by CVE-2015-5023?
CVE-2015-5023 affects authenticated users of IBM Curam Social Program Management versions 6.0 to 6.1.
4
What type of vulnerability is CVE-2015-5023?
CVE-2015-5023 is an SQL injection vulnerability that allows execution of arbitrary SQL commands.
5
Can CVE-2015-5023 be exploited remotely?
Yes, CVE-2015-5023 can be exploited remotely by authenticated users.