CVE-2020-4902

IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection

Medium · published July 1, 2021

CVSS v3.0
6.3
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191045.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/A:L/AC:L/S:U/PR:L/C:L/AV:N/I:L/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00968 · 61.5th percentile
Published
2021-07-01T15:40Z
EPSS history
Timeline
  • 01 JUL 15:40Z
    IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection
    cvelistv5