PT-2024-12762 · Ibm · Ibm Cognos Controller
CVE-2023-38724
·
Published
2024-05-03
·
Updated
2025-01-14
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM Cognos Controller versions 10.4.1 through 11.0.0
Description
The issue allows a remote attacker to send specially crafted SQL statements, which could enable the attacker to view, add, modify, or delete information in the back-end database. This is a result of a SQL injection vulnerability.
Recommendations
For versions 10.4.1 through 11.0.0, update the affected SQL Handler component as soon as possible to mitigate the risk of remote exploit.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Cognos Controller