Ibm

Db2

301 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2023-27558

  • EPSS 0.03%
  • Veröffentlicht 10.07.2023 16:15:50
  • Zuletzt bearbeitet 21.11.2024 07:53:08

IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting ...

8.8

CVE-2023-27867

  • EPSS 0.26%
  • Veröffentlicht 10.07.2023 16:15:50
  • Zuletzt bearbeitet 21.11.2024 07:53:36

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection. By sending a specially crafted request using the property clientRerouteServerListJN...

8.8

CVE-2023-27868

  • EPSS 0.26%
  • Veröffentlicht 10.07.2023 16:15:50
  • Zuletzt bearbeitet 21.11.2024 07:53:36

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing plugin classes. By sending a s...

8.8

CVE-2023-27869

  • EPSS 0.26%
  • Veröffentlicht 10.07.2023 16:15:50
  • Zuletzt bearbeitet 21.11.2024 07:53:36

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using th...

6.5

CVE-2023-29256

  • EPSS 0.06%
  • Veröffentlicht 10.07.2023 16:15:50
  • Zuletzt bearbeitet 21.11.2024 07:56:45

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046.

4.3

CVE-2023-23487

  • EPSS 0.07%
  • Veröffentlicht 10.07.2023 16:15:49
  • Zuletzt bearbeitet 21.11.2024 07:46:17

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918.

7.5

CVE-2023-26021

  • EPSS 0.08%
  • Veröffentlicht 28.04.2023 19:15:16
  • Zuletzt bearbeitet 21.11.2024 07:50:36

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a specially crafted SQL query using a LIMIT clause. IBM X-Force ID: 247864.

7.5

CVE-2023-26022

  • EPSS 0.11%
  • Veröffentlicht 28.04.2023 19:15:16
  • Zuletzt bearbeitet 21.11.2024 07:50:36

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash when an Out of Memory occurs using the DBMS_OUTPUT module. IBM X-Force ID: 247868.

5.9

CVE-2023-25930

  • EPSS 0.1%
  • Veröffentlicht 28.04.2023 18:15:26
  • Zuletzt bearbeitet 21.11.2024 07:50:26

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally. IBM X-Force ID: 247862...

7.5

CVE-2023-27555

  • EPSS 0.04%
  • Veröffentlicht 28.04.2023 18:15:26
  • Zuletzt bearbeitet 21.11.2024 07:53:08

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation wrappers. IBM X-Force ID: 249187.