CVE-2018-1819

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A…

Medium6.3EPSS 1.7%

Published: 4 Oct 2018
Updated: 16 Sept 2024
Reserved: 13 Dec 2017
Assigned by: ibm

Description

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 150023.

Scores

CVSS scores of CVE-2018-1819, by who scored it
Scored by	CVSS	Score	Vector
ibmCNA (assigner)	3.0	Medium6.3	CVSS:3.0/A:L/AC:L/AV:N/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O
NVDNVD · Modified	3.0	High8.8	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 1.7% · top 23% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.3.

Weakness

Data Manipulation
CWE-89 (opens in a new tab)All about CWE-89 and its CVEs

Affected products

IBM · Financial Transaction Manager
- affected 3.0.2
- affected 3.0.4
- affected 3.0.6
- affected 3.2.0
- affected 3.2.0.0

References (4)

http://www.ibm.com/support/docview.wss?uid=ibm10732361 (opens in a new tab)x_refsource_CONFIRMx_transferred
http://www.ibm.com/support/docview.wss?uid=ibm10732357 (opens in a new tab)x_refsource_CONFIRMx_transferred
ibm-ftm-cve20181819-sql-injection(150023) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
http://www.ibm.com/support/docview.wss?uid=ibm10732367 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2018-1819](https://trackcve.app/badge/CVE-2018-1819.svg)](https://trackcve.app/cve/CVE-2018-1819)

Record last updated 16 Sept 2024, 23:01 UTC.