CVE-2018-1819

State: Published
Severity: 6.3 Medium
Published: Oct 4, 2018
Updated: Sep 16, 2024
Reserved: Dec 13, 2017

Description

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 150023.

Scores

CVSS	Score	Vector	Source
3.0	6.3 Medium	CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O	ibm

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Financial Transaction ManagerIBM	3.0.2Affected 3.0.4Affected 3.0.6Affected 3.2.0Affected 3.2.0.0Affected

References

http://www.ibm.com/support/docview.wss?uid=ibm10732361
http://www.ibm.com/support/docview.wss?uid=ibm10732357
ibm-ftm-cve20181819-sql-injection(150023)vdb-entry
http://www.ibm.com/support/docview.wss?uid=ibm10732367

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.