CVE-2017-11471: SQL Injection
Published Jul 20, 2017
·Updated
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.
Affected Software
1 affected component
IDERA Uptime Infrastructure Monitor=7.8
Event History
Jul 20, 2017
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11471?
CVE-2017-11471 has been classified as a medium severity vulnerability due to its potential to allow SQL injection attacks.
2
How do I fix CVE-2017-11471?
To fix CVE-2017-11471, it is recommended to update to a later version of IDERA Uptime Infrastructure Monitor, if available.
3
What systems are affected by CVE-2017-11471?
CVE-2017-11471 specifically affects IDERA Uptime Infrastructure Monitor version 7.8.
4
What kind of attack is possible with CVE-2017-11471?
CVE-2017-11471 allows for SQL injection attacks, which can potentially compromise the database.
5
Is CVE-2017-11471 being actively exploited?
There have been reports of CVE-2017-11471 being actively exploited, which increases the urgency for remediation.