IBM Maximo Application Suite Monitor Component SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the Monitor Component of IBM Maximo Application Suite, affecting versions 8.10.10, 8.11.7, and 9.0. This vulnerability allows remote attackers to send specially crafted SQL statements that could be used to view, add, modify, or delete information in the back-end database.
Impact
Exploitation of this vulnerability could lead to unauthorized access to the database, allowing attackers to manipulate database information by viewing, adding, modifying, or deleting records.
Remediation
Users can upgrade to IBM Maximo Application Suite - Monitor Component versions 9.0.1, 8.10.11, or 8.11.8, all of which are available from the IBM Update Catalog.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.