Medium severity6.3NVD Advisory· Published Sep 20, 2018· Updated Jun 17, 2026
CVE-2018-1674
CVE-2018-1674
Description
IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145109.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
18cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*range: >=8.5.0.0,<=8.5.0.2
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf201803:*:*:express:*:*:*
- (no CPE)range: 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1
- (no CPE)range: 8.5
Patches
Vulnerability mechanics
References
3- www.securitytracker.com/id/1041717nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/145109nvdVDB EntryVendor Advisory
- www.ibm.com/support/docview.wssnvdVendor Advisory
News mentions
0No linked articles in our index yet.