CVE-2015-5049: SQL Injection
First published: Fri Jan 01 2016(Updated: )
SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM OpenPages | =7.0.0.0 | |
| IBM OpenPages | =7.0.0.1 | |
| IBM OpenPages | =7.0.0.2 | |
| IBM OpenPages | =7.0.0.3 | |
| IBM OpenPages | =7.0.0.4 | |
| IBM OpenPages | =7.1.0.0 | |
| IBM OpenPages | =7.1.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-5049?
CVE-2015-5049 is classified with a moderate severity level due to its ability to allow remote authenticated users to execute arbitrary SQL commands.
How do I fix CVE-2015-5049?
To fix CVE-2015-5049, upgrade IBM OpenPages GRC Platform to version 7.0.0.4 IF3 or 7.1.0.1 IF6.
Who is affected by CVE-2015-5049?
CVE-2015-5049 affects users of IBM OpenPages GRC Platform versions 7.0.0.0 through 7.1.0.0.
What type of vulnerability is CVE-2015-5049?
CVE-2015-5049 is an SQL injection vulnerability that affects the API of IBM OpenPages GRC Platform.
Can CVE-2015-5049 be exploited remotely?
Yes, CVE-2015-5049 can be exploited remotely by authenticated users to run arbitrary SQL statements.
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/severity
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm openpages
- version/ibm openpages/7.0.0.0
- version/ibm openpages/7.0.0.1
- version/ibm openpages/7.0.0.2
- version/ibm openpages/7.0.0.3
- version/ibm openpages/7.0.0.4
- version/ibm openpages/7.1.0.0
- version/ibm openpages/7.1.0.1