VulnerabilityModified
CVE-2009-2093
SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
MEDIUM 6.5EPSS 1.28%
Does this matter?
Lower severity and a low EPSS score (1.28%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 1.28% probability · 68th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- ibm/websphere partner gateway
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/36295
- http://www-01.ibm.com/support/docview.wss?uid=swg21382117Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176
- http://www.vupen.com/english/advisories/2009/2292
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52393
- http://secunia.com/advisories/36295
- http://www-01.ibm.com/support/docview.wss?uid=swg21382117Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176
- http://www.vupen.com/english/advisories/2009/2292
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52393
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.