CVE-2019-4575 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could...
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 166801.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm financial transaction manager | >= 3.2.0, <= 3.2.9 | No fix listed |
| ibm financial transaction manager | = 3.2.0 | No fix listed |
| ibm financial transaction manager | = 3.2.9 | No fix listed |
References
- ibm-ftm-cve20194575-sql-injection (166801) vdb-entry vendor-advisory
- www.ibm.com patch vendor-advisory