CVE-2015-1989

SQL injection vulnerability in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Score
CVSS 2.0 6.5 Medium
Status
Modified - psirt@us.ibm.com
Published
2015-11-08
Last modified
2024-08-06
Weaknesses
CWE-89

Affected products

References