CVE-2019-4671: SQL Injection
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171437.
Other sources
IBM Maximo Asset Management is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-4671.
What is the severity of CVE-2019-4671?
The severity of CVE-2019-4671 is medium with a severity value of 6.3.
What is the affected software?
The affected software is IBM Maximo Asset Management version 7.6.0 and 7.6.1.
How can a remote attacker exploit CVE-2019-4671?
A remote attacker can exploit CVE-2019-4671 by sending specially-crafted SQL statements to the vulnerable system.
Are there any references for more information?
Yes, you can find more information about CVE-2019-4671 at the following links: [Reference 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/171437), [Reference 2](https://www.ibm.com/support/pages/node/6332583).