Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Watson Knowledge Catalog on Cloud Pak SQL injection
Vulnerability Description
IBM Watson Knowledge Catalog on Cloud Pak for Data 4.5.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 237402.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
IBM Watson Knowledge Catalog SQL注入漏洞
Vulnerability Description
IBM Watson Knowledge Catalog是美国国际商业机器（IBM）公司的一套统一的数据目录系统。该系统主要用于快速查找、分类和共享数据等。 IBM Watson Knowledge Catalog on Cloud Pak for Data 4.5.0版本存在SQL注入漏洞。攻击者利用该漏洞发送特制的SQL语句，从而可以查看、添加、修改或删除后端数据库中的信息。
CVSS Information
N/A
Vulnerability Type
N/A