CVE-2017-11470: SQL Injection
Published Jul 20, 2017
·Updated
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.
Affected Software
1 affected component
IDERA Uptime Infrastructure Monitor=7.8
Event History
Jul 20, 2017
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11470?
CVE-2017-11470 is classified as a high-severity vulnerability due to its potential for SQL injection.
2
How do I fix CVE-2017-11470?
To fix CVE-2017-11470, update your IDERA Uptime Infrastructure Monitor to the latest version that addresses this vulnerability.
3
What software is affected by CVE-2017-11470?
CVE-2017-11470 affects IDERA Uptime Infrastructure Monitor version 7.8.
4
What type of vulnerability is CVE-2017-11470?
CVE-2017-11470 is identified as an SQL injection vulnerability.
5
What impact does CVE-2017-11470 have on affected systems?
CVE-2017-11470 can allow attackers to execute arbitrary SQL queries on the database, potentially leading to data manipulation or disclosure.