Lucene search

K
nvd[email protected]NVD:CVE-2013-4058
HistoryMar 16, 2014 - 2:06 p.m.

CVE-2013-4058

2014-03-1614:06:44
CWE-89
web.nvd.nist.gov
2

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.003

Percentile

69.9%

Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users to execute arbitrary SQL commands via unspecified interfaces.

Affected configurations

Nvd
Node
ibminfosphere_information_serverMatch8.5
OR
ibminfosphere_information_serverMatch8.5.0.1
OR
ibminfosphere_information_serverMatch8.5.0.2
OR
ibminfosphere_information_serverMatch8.5.0.3
OR
ibminfosphere_information_serverMatch8.7
OR
ibminfosphere_information_serverMatch8.7.0.1
OR
ibminfosphere_information_serverMatch8.7.0.2
OR
ibminfosphere_information_serverMatch9.1
OR
ibminfosphere_information_serverMatch9.1.0.1
OR
ibminfosphere_information_serverMatch9.1.2
VendorProductVersionCPE
ibminfosphere_information_server8.5cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*
ibminfosphere_information_server8.5.0.1cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*
ibminfosphere_information_server8.5.0.2cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*
ibminfosphere_information_server8.5.0.3cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3:*:*:*:*:*:*:*
ibminfosphere_information_server8.7cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*
ibminfosphere_information_server8.7.0.1cpe:2.3:a:ibm:infosphere_information_server:8.7.0.1:*:*:*:*:*:*:*
ibminfosphere_information_server8.7.0.2cpe:2.3:a:ibm:infosphere_information_server:8.7.0.2:*:*:*:*:*:*:*
ibminfosphere_information_server9.1cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*
ibminfosphere_information_server9.1.0.1cpe:2.3:a:ibm:infosphere_information_server:9.1.0.1:*:*:*:*:*:*:*
ibminfosphere_information_server9.1.2cpe:2.3:a:ibm:infosphere_information_server:9.1.2:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.003

Percentile

69.9%

Related for NVD:CVE-2013-4058