Vulnerability Bulletins |
IBM Security Bulletin: IBM Maximo Asset Management is vulnerable to SQL injection (CVE-2015-4967) |
|
| Affected software | IBM |
|
IBM Maximo Asset Management is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions (including Maximo for Energy Optimization, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_maximo_asset_management_is_vulnerable_to_sql_injection_cve_2015_4967?lang=en_us |
|