Security Advisory

CVE-2019-4669

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-27 16:10:16
Last updated 2024-09-17 02:16:45
Assigner ibm
CVSS score 6.3
State PUBLISHED

Description

IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automation Workflow 18.0.0.1 through 19.0.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171254.