← back
CVE-2018-1756high

CVE-2018-1756

46Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.5epss 11%
from disclosure to weapon5 days
Published on NVDSep 7
1st PoC+5d
exploitation probability
11%top 5% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, information in the back-end database. IBM X-Force ID: 148599.
CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.