Ibm

Db2

327 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2023-47145

  • EPSS 0.03%
  • Veröffentlicht 07.01.2024 19:15:08
  • Zuletzt bearbeitet 11.06.2025 17:15:34

IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402.

7.5

CVE-2023-40687

  • EPSS 0.09%
  • Veröffentlicht 04.12.2023 02:15:07
  • Zuletzt bearbeitet 21.11.2024 08:19:58

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809.

7.5

CVE-2023-29258

  • EPSS 0.09%
  • Veröffentlicht 04.12.2023 02:15:06
  • Zuletzt bearbeitet 21.11.2024 07:56:45

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific federation objects. IBM X-Force ID: 252048.

7.5

CVE-2023-38727

  • EPSS 0.09%
  • Veröffentlicht 04.12.2023 02:15:06
  • Zuletzt bearbeitet 21.11.2024 08:14:07

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statement. IBM X-Force ID: 262257.

7.5

CVE-2023-46167

  • EPSS 0.1%
  • Veröffentlicht 04.12.2023 01:15:12
  • Zuletzt bearbeitet 21.11.2024 08:28:00

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367.

7.5

CVE-2023-47701

  • EPSS 0.09%
  • Veröffentlicht 04.12.2023 01:15:12
  • Zuletzt bearbeitet 21.11.2024 08:30:42

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 266166.

7.2

CVE-2023-38003

  • EPSS 0.08%
  • Veröffentlicht 04.12.2023 01:15:08
  • Zuletzt bearbeitet 21.11.2024 08:12:40

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214.

7.5

CVE-2023-40692

  • EPSS 0.06%
  • Veröffentlicht 04.12.2023 00:15:07
  • Zuletzt bearbeitet 21.11.2024 08:19:58

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807.

7.5

CVE-2023-45178

  • EPSS 0.08%
  • Veröffentlicht 03.12.2023 18:15:42
  • Zuletzt bearbeitet 21.11.2024 08:26:29

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073.

4.4

CVE-2023-38719

  • EPSS 0.02%
  • Veröffentlicht 17.10.2023 00:15:10
  • Zuletzt bearbeitet 21.11.2024 08:14:06

IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation on DPF. IBM X-Force ID: 261607.