CVEvulnerability
CVE-2014-6080
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
• ibm security access manager for mobile 8.0
• ibm security access manager for web 7.0
• ibm security access manager for web 8.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21684475 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95767 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21684475 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95767 exchange.xforce.ibmcloud.com