PT-2020-10985
CVE-2019-4598
·
Published
2020-02-26
·
Updated
2020-02-27
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 5.2.6.5
Description
The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database.
Recommendations
For versions 5.2.0.0 through 5.2.6.5, update to a version that includes a fix for this issue to prevent SQL injection attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾