CVE-2011-1343
09.03.2011, 23:00
SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."
SQL Injection
| Vendor | Product | Version |
|---|---|---|
| ibm | tivoli_netcool\/omnibus | 𝑥 ≤ 7.2.1.10 |
| ibm | tivoli_netcool\/omnibus | 7.1.0.0 |
| ibm | tivoli_netcool\/omnibus | 7.1.0.11 |
| ibm | tivoli_netcool\/omnibus | 7.1.0.12 |
| ibm | tivoli_netcool\/omnibus | 7.1.0.13 |
| ibm | tivoli_netcool\/omnibus | 7.2.0.0 |
| ibm | tivoli_netcool\/omnibus | 7.2.0.7 |
| ibm | tivoli_netcool\/omnibus | 7.2.0.8 |
| ibm | tivoli_netcool\/omnibus | 7.2.0.9 |
| ibm | tivoli_netcool\/omnibus | 7.2.0.10 |
| ibm | tivoli_netcool\/omnibus | 7.2.1.0 |
| ibm | tivoli_netcool\/omnibus | 7.2.1.5 |
| ibm | tivoli_netcool\/omnibus | 7.2.1.6 |
| ibm | tivoli_netcool\/omnibus | 7.2.1.7 |
| ibm | tivoli_netcool\/omnibus | 7.2.1.8 |
| ibm | tivoli_netcool\/omnibus | 7.2.1.9 |
| ibm | tivoli_netcool\/omnibus | 7.3.0.0 |
| ibm | tivoli_netcool\/omnibus | 7.3.0.1 |
| ibm | tivoli_netcool\/omnibus | 7.3.0.2 |
| ibm | tivoli_netcool\/omnibus | 7.3.0.3 |
𝑥
= Vulnerable software versions