CVE-2009-2093

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-08-13 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected products

IBM Websphere Partner Gateway: 6.0.0, 6.0.0-fp7, 6.1.0, 6.1.1, 6.1.1-fp1, 6.2

References

http://secunia.com/advisories/36295
http://www-01.ibm.com/support/docview.wss?uid=swg21382117
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32607
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32608
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32609
http://www-1.ibm.com/support/docview.wss?uid=swg1JR33176
http://www.vupen.com/english/advisories/2009/2292
https://exchange.xforce.ibmcloud.com/vulnerabilities/52393
http://secunia.com/advisories/36295
http://www-01.ibm.com/support/docview.wss?uid=swg21382117
http://www-1.ibm.com/support/docview.wss?uid=swg1JR32386

Get alerted when CVE-2009-2093 or the next vulnerability affects your stack