CVE-2009-2093

EUVD-2009-2089
SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
Affected Products (NVD)
VendorProductVersion
ibmwebsphere_partner_gateway
6.0.0
ibmwebsphere_partner_gateway
6.0.0:fp7
ibmwebsphere_partner_gateway
6.1.0
ibmwebsphere_partner_gateway
6.1.0
ibmwebsphere_partner_gateway
6.1.1
ibmwebsphere_partner_gateway
6.1.1
ibmwebsphere_partner_gateway
6.1.1:fp1
ibmwebsphere_partner_gateway
6.2
ibmwebsphere_partner_gateway
6.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/36295
http://www-01.ibm.com/support/docview.wss?uid=swg21382117
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609
http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176
http://www.vupen.com/english/advisories/2009/2292
https://exchange.xforce.ibmcloud.com/vulnerabilities/52393
http://secunia.com/advisories/36295
http://www-01.ibm.com/support/docview.wss?uid=swg21382117
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609
http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176
http://www.vupen.com/english/advisories/2009/2292
https://exchange.xforce.ibmcloud.com/vulnerabilities/52393