VulnerabilityModified

CVE-2013-0511

Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters.

MEDIUM 6.5EPSS 0.96%

Does this matter?

Lower severity and a low EPSS score (0.96%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters.

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 0.96% probability · 60th percentile
CISA KEV: Not listed
Weakness: CWE-89
Affected: ibm/security appscan
Source: psirt@us.ibm.com

References

http://www-01.ibm.com/support/docview.wss?uid=swg21626264
https://exchange.xforce.ibmcloud.com/vulnerabilities/82344
http://www-01.ibm.com/support/docview.wss?uid=swg21626264
https://exchange.xforce.ibmcloud.com/vulnerabilities/82344

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.