CVE-2022-43927

IBM Db2 for Linux, UNIX and Windows information disclosure

IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used. IBM X-Force ID: 241671.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2022-43929

IBM Db2 for Linux, UNIX and Windows denial of service

IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID: 241676.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2023-26281

IBM HTTP Server denial of service

IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL. IBM X-Force ID: 248296.

CVSS 3.1 · 5.9 Medium EPSS 1.1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Http Server and 4 more

CVE-2023-26283

IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248416.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix I and 5 more

CVE-2024-27254

IBM Db2 for Linux, UNIX and Windows denial of service

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 283813.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 4 more

CVE-2023-47747

IBM Db2 denial of service

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 4 more

CVE-2023-47746

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 5 more

CVE-2023-30449

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 4 more

CVE-2023-30448

IBM Db2 denial of service

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437.

CVSS 3.1 · 5.9 Medium EPSS 1.4% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2023-30445

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 4 more

CVE-2023-30447

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253436.

CVSS 3.1 · 5.9 Medium EPSS 1.3% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2023-30446

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253361 .

CVSS 3.1 · 5.9 Medium EPSS 1.3% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2023-30442

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options. IBM X-Force ID: 253202.

CVSS 3.1 · 5.9 Medium EPSS 1.3% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2023-30431

IBM Db2 buffer overflow

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 4 more

CVE-2023-29256

IBM Db2 information disclosure

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2023-27869

IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 249517.

CVSS 3.1 · 6.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2023-27868

IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing plugin classes. By sending a specially crafted request using the named pluginClassName class, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 249516.

CVSS 3.1 · 6.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2023-27867

IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection. By sending a specially crafted request using the property clientRerouteServerListJNDIName, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 249514.

CVSS 3.1 · 6.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix Db2 and 3 more

CVE-2023-28950

IBM MQ information disclosure

IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix I and 4 more

CVE-2023-28514

IBM MQ information disclosure

IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Hp Ibm Linux and 2 more

Products

Hp-ux Aix I and 4 more