CVE-2024-41767

Summary

CVE-2024-41767 is a newly disclosed SQL injection vulnerability affecting IBM Engineering Lifecycle Optimization - Publishing versions 7.0.2 and 7.0.3. This issue allows a remote attacker to transmit malicious SQL statements that can manipulate data in the backend database, potentially leading to unauthorized access, modification, or deletion of information. IBM urges users to apply the available patch as soon as possible to mitigate this security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.