Lucene search

PRIOn knowledge basePRION:CVE-2022-41731

HistoryFeb 12, 2023 - 4:15 a.m.

Sql injection

2023-02-1204:15:00

PRIOn knowledge base

www.prio-n.com

ibm

watson knowledge catalog

cloud pak for data

sql injection

remote attacker

database vulnerability

ibm x-force id

nvd

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.3%

JSON

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.5.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 237402.

CPENameOperatorVersion
watson_knowledge_catalog_on_cloud_pak_for_dataeq4.5.0

CPE	Name	Operator	Version
	watson_knowledge_catalog_on_cloud_pak_for_data	eq	4.5.0

References

exchange.xforce.ibmcloud.com/vulnerabilities/237402

www.ibm.com/support/pages/node/6890729