CVE-2019-4224

Name of the Vulnerable Software and Affected Versions IBM PureApplication System versions 2.2.3.0 through 2.2.5.3

Description The issue allows a remote attacker to send specially-crafted SQL statements, which could enable the attacker to view, add, modify, or delete information in the back-end database. This is achieved through SQL injection.

Recommendations For IBM PureApplication System versions 2.2.3.0 through 2.2.5.3, update to a version outside of the affected range to resolve the issue. As a temporary workaround, consider restricting access to the database to minimize the risk of exploitation.