Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-39122

BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 (and is also fixed by a patch for 9.0.20.200).

Published

2023-07-31T23:15:10.297

Last Modified

2024-11-21T08:14:45.953

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application bmc control-m < 9.0.21 Yes
References