CVE-2022-41297

IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237212.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@us.ibm.com

Published

2022-12-01

Last modified

2025-04-24

Weaknesses

CWE-352

Affected products

• Db2 On Cloud Pak For Data (Ibm)
• Db2 Warehouse On Cloud Pak For Data (Ibm)
• Db2u (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/237212
• https://www.ibm.com/support/pages/node/6843071