Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm db2 connect 9.5 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2013-5466
The XSLT library in IBM DB2 and DB2 Connect 9.5 up to and including 10.5, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service via unspecified vectors.
Ibm Db2 Connect 10.1Ibm Db2 Connect 10.5Ibm Db2 9.5Ibm Db2 Connect 9.7Ibm Db2 Connect 9.8Ibm Db2 Connect 9.5Ibm Db2 10.1Ibm Db2 10.5Ibm Db2 Purescale Feature 9.8 -Ibm Db2 9.8Ibm Db2 9.7
7.2
CVSSv2
CVE-2013-3475
Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products, allows local users to gain privileges via unspecified vectors.
Ibm Db2 Connect 9.1Ibm Db2 Connect 9.5Ibm Db2 9.1Ibm Db2 Connect 9.7Ibm Db2 Connect 9.8Ibm Db2 9.5Ibm Db2 9.7Ibm Db2 Connect 10.1Ibm Db2 9.8Ibm Db2 10.1Ibm Smart Analytics System 7600 -
4.6
CVSSv2
CVE-2013-4033
IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority.
Ibm Db2 10.5Ibm Db2 10.1Ibm Db2 Connect 10.1Ibm Db2 Connect 9.5Ibm Db2 9.8Ibm Db2 9.7Ibm Db2 Connect 10.5Ibm Db2 Connect 9.7Ibm Db2 Connect 9.8
5
CVSSv2
CVE-2009-0172
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote malicious users to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
Ibm Db2 Universal Database 9.1Ibm Db2 Universal Database 9.5
6.4
CVSSv2
CVE-2010-3739
The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances in which database-level audit settings were intended, which might make it easier f...
Ibm Db2 Universal Database 9.5Ibm Db2 Universal Database
8.5
CVSSv2
CVE-2013-6744
The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE_EXTERNAL_ROUTINE authority.
Ibm Db2 10.5.0.2Ibm Db2 10.5.0.1Ibm Db2 9.7.0.8Ibm Db2 9.7.0.7Ibm Db2 9.5Ibm Db2 10.1.0.2Ibm Db2 10.1.0.1Ibm Db2 9.7.0.4Ibm Db2 9.7.0.3Ibm Db2 9.7.0.2Ibm Db2 10.1Ibm Db2 9.7.0.9Ibm Db2 9.7.0.1Ibm Db2 9.7Ibm Db2 10.5Ibm Db2 10.1.0.3Ibm Db2 9.7.0.6Ibm Db2 9.7.0.5
7.1
CVSSv2
CVE-2012-2197
Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges.
Ibm Db2 9.1Ibm Db2 9.1.0.1Ibm Db2 9.1.0.5Ibm Db2 9.1.0.6Ibm Db2 9.1.0.11Ibm Db2 9.1.0.2Ibm Db2 9.1.0.7Ibm Db2 9.1.0.3Ibm Db2 9.1.0.8Ibm Db2 9.1.0.4Ibm Db2 9.1.0.9Ibm Db2 9.1.0.10Ibm Db2 9.5.0.4Ibm Db2 9.5Ibm Db2 9.5.0.1Ibm Db2 9.5.0.2Ibm Db2 9.5.0.5Ibm Db2 9.5.0.6Ibm Db2 9.5.0.3Ibm Db2 9.5.0.7Ibm Db2 9.5.0.8Ibm Db2 9.5.0.9
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook