Ibm

Db2 Warehouse On Cloud Pak For Data

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2023-33854

  • EPSS 0.19%
  • Veröffentlicht 22.06.2026 14:31:21
  • Zuletzt bearbeitet 30.06.2026 15:03:14

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and manipulate input data using man in the middle techniques.

6.5

CVE-2025-2669

  • EPSS 0.2%
  • Veröffentlicht 22.06.2026 13:18:42
  • Zuletzt bearbeitet 30.06.2026 15:46:55

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive information outside of their authority due to improper token validation.

6.5

CVE-2024-54178

  • EPSS 0.24%
  • Veröffentlicht 22.06.2026 13:15:30
  • Zuletzt bearbeitet 30.06.2026 15:47:16

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8,5.0,5.1,5.2,5.3 could allow an authenticated user to cause a denial of service when creating new databases due to improper allocation of resources.

8.8

CVE-2023-42005

  • EPSS 0.29%
  • Veröffentlicht 29.05.2024 13:15:48
  • Zuletzt bearbeitet 18.08.2025 15:03:51

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264.

6.5

CVE-2022-41297

  • EPSS 0.23%
  • Veröffentlicht 01.12.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:22:59

IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237212.