CVE-2015-0161

IBM Security SiteProtector System 3.0-3.0.0.6, 3.1-3.1.0.3, 3.1.1-3.1.1.1 - Authenticated SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21699470

Scores

EPSS 0.0099
EPSS Percentile 58.9%

Details

CWE
CWE-89
Status published
Products (13)
ibm/security_siteprotector_system 3.0
ibm/security_siteprotector_system 3.0.0.1
ibm/security_siteprotector_system 3.0.0.2
ibm/security_siteprotector_system 3.0.0.3
ibm/security_siteprotector_system 3.0.0.4
ibm/security_siteprotector_system 3.0.0.5
ibm/security_siteprotector_system 3.0.0.6
ibm/security_siteprotector_system 3.1.0.0
ibm/security_siteprotector_system 3.1.0.1
ibm/security_siteprotector_system 3.1.0.2
... and 3 more
Published May 25, 2015
Tracked Since Feb 18, 2026