CVE-2019-4650: SQL Injection
IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170961.
Other sources
IBM Maximo Asset Management is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4650?
The severity of CVE-2019-4650 is medium with a score of 6.3.
What is affected by CVE-2019-4650?
IBM Maximo Asset Management version 7.6.1.1 is affected by CVE-2019-4650.
What is the vulnerability description of CVE-2019-4650?
CVE-2019-4650 is a SQL injection vulnerability in IBM Maximo Asset Management 7.6.1.1, which allows remote attackers to view, add, modify, or delete information in the back-end database.
How can an attacker exploit CVE-2019-4650?
An attacker can exploit CVE-2019-4650 by sending specially-crafted SQL statements to the vulnerable IBM Maximo Asset Management instance.
How can I mitigate the vulnerability in IBM Maximo Asset Management 7.6.1.1?
To mitigate the vulnerability in IBM Maximo Asset Management 7.6.1.1, apply the necessary security patches provided by IBM and follow their recommended best practices for secure configuration.