[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOw-PKoFUJaFcpZMfvRzjXDsjHsjbbOcltm_EJ9FLy-4":3,"g5a-risk:CVE-2018-1674":183},{"success":4,"data":5,"meta":181},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":75,"references":76,"referencesCount":92,"weaknesses":93,"weaknessesCount":102,"isActivelyExploited":103,"cisaInfo":15,"otxData":15,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":179,"notableEvents":180},"CVE-2018-1674","What is CVE-2018-1674?","IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145109.","IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQ...","2018-09-20T15:29:00.303","2019-10-09T23:38:52.15",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":37,"CVSSMetricV40":15},null,[17,29],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":36},"psirt@us.ibm.com","Secondary",{"Version":21,"VectorString":33,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":35,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",6.3,"MEDIUM",3.4,[38],{"Source":18,"Type":19,"CVSSData":39,"BaseSeverity":35,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":40,"VectorString":41,"AccessVector":22,"AccessComplexity":23,"Authentication":42,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,8,6.4,0.01695,[47,47,47,47,47,47,47],"High",[51,56,59,63,66,69,72],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"ibm","business_automation_workflow","18.0.0.0","cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"18.0.0.1","cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:*:*:*:*",{"vendor":52,"product":60,"version":61,"criteria":62,"vulnerable":4},"business_process_manager","*","cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*",{"vendor":52,"product":60,"version":64,"criteria":65,"vulnerable":4},"8.5.5.0","cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",{"vendor":52,"product":60,"version":67,"criteria":68,"vulnerable":4},"8.5.6.0","cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:advanced:*:*:*",{"vendor":52,"product":60,"version":70,"criteria":71,"vulnerable":4},"8.5.7.0","cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:advanced:*:*:*",{"vendor":52,"product":60,"version":73,"criteria":74,"vulnerable":4},"8.6.0.0","cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:express:*:*:*",7,[77,83,88],{"url":78,"source":79,"tags":80},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041717","Securitytracker",[81,82],"Third Party Advisory","VDB Entry",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F145109","Ibmcloud",[82,87],"Vendor Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fdocview.wss?uid=ibm10720035","Ibm",[87],3,[94],{"id":95,"name":96,"description":97,"extendedDescription":98,"status":99,"abstraction":100,"structure":101},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",1,false,[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2018-1674? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-1674, a high severity cyber security vulnerability from 2018. IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 th...","CVE-2018-1674, CVE-2018-1674 vulnerability, CVE-2018-1674 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, ibm security, business_automation_workflow vulnerability, business_process_manager vulnerability","\u002Fwhat-is\u002Fcve-2018-1674",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":10,"dateModified":11,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-1674","Cybersecurity","CVE-2018-1674, CVE-2018-1674 vulnerability, CVE-2018-1674 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131],{"Operator":15,"Negate":15,"Nodes":132},[133],{"Operator":134,"Negate":15,"CPEMatch":135},"OR",[136,138,140,144,146,149,152,155,157,160,163,165,168,171,174,176],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":137,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B1D36993-75D4-4EDE-8748-A3FDE4C69DF3",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":139,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"10B802CE-F898-4B60-9E2C-4D271F9211C7",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":141,"VersionStartExcluding":15,"VersionStartIncluding":142,"VersionEndExcluding":15,"VersionEndIncluding":143},"EC98B343-9E03-4056-8EB0-899B7A80CC88","8.5.0.0","8.5.0.2",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":145,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7021B830-3EE4-446D-8D87-BBD2097A023E",{"Vulnerable":4,"Criteria":147,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*","00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1",{"Vulnerable":4,"Criteria":150,"MatchCriteriaID":151,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*","80D84C06-5E93-4DA4-A333-D3CECB7D74E4",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":154,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*","DF7E8429-8750-4D3C-90E1-829031C7C306",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5FD533D8-D3B2-4661-BD35-C48C1C3C47E1",{"Vulnerable":4,"Criteria":158,"MatchCriteriaID":159,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:express:*:*:*","32F2F148-4CF2-46BF-AA7D-D019CBA72C84",{"Vulnerable":4,"Criteria":161,"MatchCriteriaID":162,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:standard:*:*:*","D67D59BD-B0B2-47A8-8045-7C62721EA081",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":164,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8F88ED9A-7D7F-4C1F-87AA-555C941DE583",{"Vulnerable":4,"Criteria":166,"MatchCriteriaID":167,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*","8736CAA3-7C69-4F8D-936B-2B7B3B5DEED2",{"Vulnerable":4,"Criteria":169,"MatchCriteriaID":170,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*","CD9103EF-29E7-48E6-ADF4-66D74C3FF427",{"Vulnerable":4,"Criteria":172,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:express:*:*:*","BD42A0F7-540B-4673-AD8C-373A424A27B2",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":175,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"542E8F0D-8326-48E1-9D72-C61EF104573D",{"Vulnerable":4,"Criteria":177,"MatchCriteriaID":178,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf201803:*:*:express:*:*:*","A66AA55B-BA7F-4C89-BCFE-7F3527FF0350",[],[],{"lastModified":11,"cacheTime":182,"version":40},1793226349118,{"score":184,"band":185,"action":186,"scoredAt":187},47,"Medium","Plan remediation","2026-10-28T06:44:47.219804+00:00"]