VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Feb 27, 2020· Updated Jun 17, 2026

CVE-2019-4669

CVE-2019-4669

Description

IBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03, and IBM Business Automation Workflow 18.0.0.1 through 19.0.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 171254.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • IBM/Business Automation Workflowcpe-rescue3 versions
    18.0.0.1+ 2 more
    • (no CPE)range: 18.0.0.1
    • cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:*:*:*:*range: >=18.0.0.1,<=19.0.0.3
    • (no CPE)range: 18.0.0.1 through 19.0.0.3
  • IBM/Business Process Managercpe-rescue11 versions
    8.6.0.0+ 10 more
    • (no CPE)range: 8.6.0.0
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:-:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf2017.1:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf2018.03:*:*:*:*:*:*
    • (no CPE)range: 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.