big sql vulnerabilities and exploits

(subscribe to this query)

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.

Ibm Big Sql 7.1.0 Ibm Big Sql 7.1.1 Ibm Big Sql Ibm Big Sql 7.2.3

IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.

Ibm Big Sql 7.3 Ibm Big Sql 7.4 Ibm Big Sql 7.5 Ibm Big Sql 7.6 Ibm Watson Query With Cloud Pak For Data 1.8 Ibm Watson Query With Cloud Pak For Data 2.1 Ibm Watson Query With Cloud Pak For Data 2.2 Ibm Watson Query With Cloud Pak For Data 2.0

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x prior to 11.2.0-HF3 and 11.2.x prior to 11...

An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands. Not...

2 Articles

SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote malicious users to execute arbitrary SQL commands via the txtSiteId parameter.

Site2nite Big Truck Broker

1 EDB exploit

A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampered with and impact the Configuration Utility until there is a resync of the rules. Traffic processing...

F5 Big-ip Advanced Firewall Manager 12.1.0 F5 Big-ip Advanced Firewall Manager 12.1.2 F5 Big-ip Advanced Firewall Manager 12.1.1 F5 Big-ip Advanced Firewall Manager 12.0.0 F5 Big-ip Advanced Firewall Manager 13.0.0

On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a vulnerability in the AFM configuration utility may allow any authenticated BIG-IP user to run an SQL injection attack.

F5 Big-ip Advanced Firewall Manager

In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to perform a read-only blind SQL injection attack.

F5 Big-ip Advanced Firewall Manager

On BIG-IP AFM version 16.0.x prior to 16.0.1.2, 15.1.x prior to 15.1.3, 14.1.x prior to 14.1.4.2, 13.1.x prior to 13.1.4.1, and all versions of 12.1.x, a SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. This issue is exposed only when...

F5 Big-ip Advanced Firewall Manager

An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

1 Github repository1 Article

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook