CVE-2017-1606: SQL Injection

Published Dec 11, 2017

Updated

IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 132926.

Affected Software

8 affected components

IBM Financial Transaction Manager=3.0.0.0

IBM Financial Transaction Manager=3.0.0.1

IBM Financial Transaction Manager=3.0.0.2

IBM Financial Transaction Manager=3.0.0.3

IBM Financial Transaction Manager=3.0.0.4

IBM Financial Transaction Manager=3.0.0.5

IBM Financial Transaction Manager=3.0.0.6

IBM Financial Transaction Manager=3.0.0.7

Event History

Dec 11, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1606?

The severity of CVE-2017-1606 is high.

How does CVE-2017-1606 affect IBM Financial Transaction Manager?

CVE-2017-1606 affects IBM Financial Transaction Manager versions 3.0.0.0 through 3.0.0.7 on Multi-Platform (MP).

What is the vulnerability type of CVE-2017-1606?

CVE-2017-1606 is a SQL injection vulnerability.

How can an attacker exploit CVE-2017-1606?

An attacker can exploit CVE-2017-1606 by sending specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.

Are there any references available for CVE-2017-1606?

Yes, you can find references for CVE-2017-1606 at the following links: [link1], [link2], [link3].