CVE-2011-1343: IBM Tivoli Netcool/omnibus

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."

Affected products

• IBM Tivoli Netcool/omnibus: up to and including 7.2.1.10; version 7.1.0.0 only; version 7.1.0.11 only; version 7.1.0.12 only; version 7.1.0.13 only; version 7.2.0.0 only; …

Published 2011-03-09. Last modified 2026-06-16.