SQL Injection in Actian Matrix

CVE-2015-3993

Actian Matrix 5.1.x through 5.1.2.4 and 5.2.x through 5.2.0.1 allows remote authenticated users to bypass intended write-access restrictions and execute an UPDATE statement by referencing a table.

Vulnerability class: SQL Injection

EPSS: 0.011 (63.3th percentile) — read the EPSS interpretation.

Affected products

  • Actian Matrix — versions 5.1.1, 5.1.2, 5.2.0
  • N/a — versions n/a

Weakness classification (CWE)

References