Name: CVE-2019-12838: Improper Neutralization of Special Elements used in an SQL Command
Creator: Rapid7
Published: 2019-07-11T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-12838, CWE-89, CVSS 9.8, EPSS 0.0279

SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade slurm-llnl	Nov 20, 2019	Jul 11, 2019
Suse	—	Upgrade slurm_20_02-nodeUpgrade slurm_20_11-nodeUpgrade libpmi0_20_02Upgrade libslurm36Upgrade slurm-torqueUpgrade slurm_20_02-luaUpgrade slurm_20_11-mungeUpgrade slurm-pluginsUpgrade slurm_18_08-sqlUpgrade slurm_20_11-slurmdbdUpgrade slurm-auth-noneUpgrade libpmi0Upgrade slurm_20_11Upgrade slurm_20_02-develUpgrade libslurm31Upgrade slurm-pam_slurmUpgrade libslurm35Upgrade slurm-openlavaUpgrade slurm_18_08-configUpgrade pdsh-machinesUpgrade slurm-luaUpgrade slurm_20_11-pluginsUpgrade slurm_18_08-torqueUpgrade slurm_18_08-luaUpgrade slurm_20_02-mungeUpgrade libslurm33Upgrade libslurm32Upgrade slurm-configUpgrade pdsh-netgroupUpgrade slurm_20_02-pam_slurmUpgrade slurm_20_11-config-manUpgrade pdsh-slurmUpgrade slurm_18_08-auth-noneUpgrade slurm_18_08-develUpgrade slurm-seffUpgrade slurm-webdocUpgrade pdshUpgrade slurm_20_11-webdocUpgrade slurm_18_08-docUpgrade slurm_20_11-sviewUpgrade slurmUpgrade pdsh-slurm_20_02Upgrade slurm-docUpgrade pdsh-gendersUpgrade slurm-slurmdb-directUpgrade slurm_20_02-sviewUpgrade pdsh-slurm_20_11Upgrade perl-slurm_20_11Upgrade slurm-sched-wikiUpgrade slurm-nodeUpgrade slurm_20_11-sqlUpgrade slurm-slurmdbdUpgrade libnss_slurm2_20_11Upgrade libnss_slurm2_20_02Upgrade perl-slurm_18_08Upgrade perl-slurmUpgrade libpmi0_20_11Upgrade pdsh-slurm_18_08Upgrade slurm_18_08-pam_slurmUpgrade perl-slurm_20_02Upgrade slurm-sqlUpgrade slurm_20_11-luaUpgrade slurm_20_11-torqueUpgrade slurm_20_11-pam_slurmUpgrade perl-SwitchUpgrade slurm_20_02Upgrade slurm-crayUpgrade pdsh-dshgroupUpgrade slurm-sviewUpgrade slurm-develUpgrade slurm-mungeUpgrade slurm_18_08-pluginsUpgrade slurm_20_11-configUpgrade slurm-hdf5Upgrade slurm_18_08Upgrade slurm_20_02-slurmdbdUpgrade slurm_18_08-nodeUpgrade slurm_20_02-configUpgrade slurm_20_11-develUpgrade slurm_18_08-slurmdbdUpgrade slurm-config-manUpgrade slurm_20_02-auth-noneUpgrade slurm_20_02-sqlUpgrade slurm_20_02-docUpgrade libpmi0_18_08Upgrade slurm_20_02-torqueUpgrade slurm-sjstatUpgrade slurm_20_02-config-manUpgrade slurm_20_11-docUpgrade slurm_20_11-auth-noneUpgrade slurm_20_02-pluginsUpgrade slurm_18_08-munge	Sep 3, 2019	Jul 11, 2019
Ubuntu	—	No solution exists	Jun 26, 2025	Jul 11, 2019

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence