IBM Watson Knowledge Catalog on Cloud Pak for Data 4.5.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 237402.
2023-02-12T04:15:15.633
2024-11-21T07:23:45.080
Modified
CVSSv3.1: 8.6 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | watson_knowledge_catalog_on_cloud_pak_for_data | 4.5.0 | Yes |
| Application | redhat | openshift | - | No |