CVE-2016-0249
HighSummary
CVE-2016-0249 describes an SQL injection vulnerability in IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100. It allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Risk Assessment
This vulnerability poses a significant risk to organizations as it allows attackers to remotely manipulate database data, potentially leading to loss of confidentiality and integrity of the data.
Recommendation
It is recommended to update IBM Security Guardium Database Activity Monitor to the latest version to mitigate this vulnerability and to conduct a security audit of the system.
Other vulnerabilities in IBM Security Guardium Database Activity Monitor
See all- CVE-2016-6065High
The IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.
- CVE-2016-0328High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow local users to obtain administrator privileges for command execution via unspecified vectors.
- CVE-2016-0241High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP.
- CVE-2016-0239High
IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allow remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.
- CVE-2016-0236High
IBM Security Guardium Database Activity Monitor versions 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allow remote authenticated users to execute arbitrary commands with root privileges via the search field.
Original NVD description (English source)
SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.