Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Sterling Partner Engagement Manager SQL injection
Vulnerability Description
IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 236208.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
IBM Sterling Partner Engagement Manager SQL注入漏洞
Vulnerability Description
IBM Sterling Partner Engagement Manager是美国国际商业机器（IBM）公司的一个自动化管理工具。 IBM Sterling Partner Engagement Manager存在SQL注入漏洞，该漏洞源于远程攻击者可以发送特制的SQL语句实现查看、添加、修改或删除后端数据库中的信息。以下版本受到影响：6.1、6.2和6.2.1版本。
CVSS Information
N/A
Vulnerability Type
N/A