CVE-2022-47984: IBM InfoSphere Information Server SQL injection

Published May 19, 2023

Updated

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 243163.

Affected Software

4 affected components

IBM InfoSphere Information Server=11.7

IBM AIX

Linux Linux kernel

Microsoft Windows

Remediation

Patch Available

https://https://www.ibm.com/support/pages/node/6988153

Event History

May 19, 2023

CVE Published

via MITRE·03:56 PM

Data Sourced

via MITRE·03:56 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-47984?

CVE-2022-47984 is a vulnerability in IBM InfoSphere Information Server 11.7 that allows remote attackers to perform SQL injection and potentially access or modify the backend database.

How severe is CVE-2022-47984?

CVE-2022-47984 has a severity rating of 9.8, which is considered critical.

Which version of IBM InfoSphere Information Server is affected by CVE-2022-47984?

IBM InfoSphere Information Server version 11.7 is affected by CVE-2022-47984.

What is the impact of CVE-2022-47984?

CVE-2022-47984 allows remote attackers to view, add, modify, or delete information in the backend database of IBM InfoSphere Information Server 11.7.

Is IBM AIX or Linux affected by CVE-2022-47984?

No, IBM AIX and Linux are not affected by CVE-2022-47984.