Db2 Connect (Ibm) - vulnerabilities (CVEs)

17 CVEs, 0 in the last 30 days, 132 known versions, newest CVE from 2017-09-12. Vendor: Ibm.

CVEs of Db2 Connect

CVE-2017-1434 - CVSS 4.7 (medium), 2017-09-12: IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log…
CVE-2017-1451 - CVSS 7.8 (high), 2017-09-12: IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to…
CVE-2017-1520 - CVSS 3.7 (low), 2017-09-12: IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM…
CVE-2017-1439 - CVSS 6.7 (medium), 2017-09-12: IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to…
CVE-2017-1519 - CVSS 5.9 (medium), 2017-09-12: IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setup with a particular…
CVE-2017-1438 - CVSS 6.7 (medium), 2017-09-12: IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to…
CVE-2017-1452 - CVSS 7.8 (high), 2017-09-12: IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated privilege and…
CVE-2017-1297 - CVSS 7.3 (high), 2017-06-27: IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper…
CVE-2017-1105 - CVSS 7.1 (high), 2017-06-27: IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user…
CVE-2016-5995 - CVSS 7.3 (high), 2016-10-01: Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to…
CVE-2016-0211 - CVSS 4.3 (medium), 2016-04-28: IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of…
CVE-2014-6210 - CVSS 4 (medium), 2014-12-12: IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a…
CVE-2013-6717 - CVSS 4 (medium), 2013-12-19: The OLAP query engine in IBM DB2 and DB2 Connect 9.7 through FP9, 9.8 through FP5, 10.1 through FP3, and 10.5 through FP2, and the DB2 pureScale Feature 9.8…
CVE-2013-5466 - CVSS 4 (medium), 2013-12-18: The XSLT library in IBM DB2 and DB2 Connect 9.5 through 10.5, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated…
CVE-2013-4033 - CVSS 4.6 (medium), 2013-08-28: IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by…
CVE-2013-3475 - CVSS 7.2 (high), 2013-06-05: Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600…
CVE-2012-3324 - CVSS 9 (critical), 2012-09-25: Directory traversal vulnerability in the UTL_FILE module in IBM DB2 and DB2 Connect 10.1 before FP1 on Windows allows remote authenticated users to modify,…