CVE-2019-4224: IBM Pureapplication System

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240.

Affected products

• IBM Pureapplication System: from 2.2.3.0, up to and including 2.2.5.3

Published 2019-06-26. Last modified 2026-06-17.