VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 5, 2014· Updated Jun 17, 2026

CVE-2013-6302

CVE-2013-6302

Description

SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6331.

Affected products

7
  • IBM/Algo One7 versions
    cpe:2.3:a:ibm:algo_one:4.7.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:ibm:algo_one:4.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:algo_one:4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:algo_one:4.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:algo_one:4.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:algo_one:4.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:algo_one:5.0.0:*:*:*:*:*:*:*
    • (no CPE)range: >=4.7.0, <=5.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.