Lucene search

China National Vulnerability DatabaseCNVD-2023-79716

HistoryJan 14, 2023 - 12:00 a.m.

IBM Sterling Partner Engagement Manager SQL Injection Vulnerability

2023-01-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

ibm

sterling

partner

engagement

manager

sql injection

vulnerability

validation

data exposure

international business machines

sensitive database data

AI Score

7.7

Confidence

Low

EPSS

0.001

Percentile

44.6%

JSON

IBM Sterling Partner Engagement Manager is an automated management tool from International Business Machines (IBM). IBM Sterling Partner Engagement Manager suffers from a SQL injection vulnerability that stems from the application’s lack of validation of externally entered SQL statements, which can be exploited by an attacker to execute illegal SQL commands to obtain sensitive database data.