CVE-2023-38724

Summary

CVE-2023-38724 is a SQL injection vulnerability affecting IBM Cognos Controller versions 10.4.1, 10.4.2, and 11.0.0. An attacker can exploit this flaw by sending crafted SQL statements, potentially granting unauthorized access to view, modify, or delete data in the backend database. IBM's X-Force has assigned ID 262183 to this security issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.