Informix Dynamic Server (Ibm) - vulnerabilities (CVEs)

53 CVEs, 0 in the last 30 days, 120 known versions, newest CVE from 2026-08-12. Vendor: Ibm.

CVEs of Informix Dynamic Server

CVE-2026-13476 - CVSS 7.3 (high), 2026-08-12: IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the…
CVE-2026-13367 - CVSS 7.8 (high), 2026-08-12: IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.
CVE-2026-13361 - CVSS 8.8 (high), 2026-08-12: IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.
CVE-2024-45675 - CVSS 8.4 (high), 2025-12-02: IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.
CVE-2024-49343 - CVSS 5.4 (medium), 2025-07-28: IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be…
CVE-2024-49342 - CVSS 7.5 (high), 2025-07-28: IBM Informix Dynamic Server 12.10 and 14.10 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
CVE-2025-1991 - CVSS 7.5 (high), 2025-06-28: IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets.
CVE-2023-28526 - CVSS 6.2 (medium), 2023-12-09: IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local…
CVE-2023-28527 - CVSS 6.2 (medium), 2023-12-09: IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to…
CVE-2023-28523 - CVSS 8.4 (high), 2023-12-09: IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker…
CVE-2021-20515 - CVSS 6.7 (medium), 2021-04-30: IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could overflow a…
CVE-2020-4799 - CVSS 7.8 (high), 2020-10-08: IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID:…
CVE-2019-4253 - CVSS 7.8 (high), 2019-08-20: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain root access…
CVE-2018-1635 - CVSS 8.2 (high), 2019-08-20: Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root…
CVE-2018-1634 - CVSS 8.2 (high), 2019-08-20: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a…
CVE-2018-1796 - CVSS 7.8 (high), 2019-08-20: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-Force ID: 149426.
CVE-2018-1633 - CVSS 8.2 (high), 2019-08-20: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a…
CVE-2018-1636 - CVSS 8.2 (high), 2019-08-20: Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root…
CVE-2018-1632 - CVSS 8.2 (high), 2019-08-20: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a…
CVE-2018-1631 - CVSS 8.2 (high), 2019-08-20: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a…
CVE-2018-1630 - CVSS 8.2 (high), 2019-08-20: IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a…
CVE-2017-1508 - CVSS 6.7 (medium), 2017-09-13: IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620.
CVE-2017-1310 - CVSS 6.5 (medium), 2017-06-29: IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done…
CVE-2016-0226 - CVSS 7.8 (high), 2016-03-28: The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap…
CVE-2012-4857 - CVSS 9 (critical), 2012-12-08: Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted…
CVE-2012-3334 - CVSS 9 (critical), 2012-09-25: Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated users to…
CVE-2011-1033 - CVSS 9.3 (critical), 2011-02-15: Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in…
CVE-2010-4069 - CVSS 8.5 (high), 2010-10-25: Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and…
CVE-2010-4070 - CVSS 10 (critical), 2010-10-25: Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before…
CVE-2010-4053 - CVSS 9 (critical), 2010-10-23: Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before…
CVE-2009-2753 - CVSS 10 (critical), 2010-03-05: Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as…
CVE-2009-2754 - CVSS 10 (critical), 2010-03-05: Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used…
CVE-2009-3470 - CVSS 5 (medium), 2009-09-29: IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of…
CVE-2008-0949 - CVSS 10 (critical), 2008-03-18: Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request…
CVE-2008-0727 - CVSS 8.5 (high), 2008-03-18: Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long…
CVE-2008-0768 - CVSS 10 (critical), 2008-02-13: Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server…
CVE-2008-0369 - CVSS 6.9 (medium), 2008-01-19: Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target…
CVE-2008-0368 - CVSS 7.2 (high), 2008-01-19: onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument.
CVE-2007-5957 - CVSS 4.9 (medium), 2007-11-14: Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service…
CVE-2007-5956 - CVSS 7.2 (high), 2007-11-14: Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS…
CVE-2006-5663 - CVSS 4.6 (medium), 2006-11-03: IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation…
CVE-2006-5664 - CVSS 4.6 (medium), 2006-11-03: The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local…
CVE-2006-5163 - CVSS 3.6 (low), 2006-10-05: IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local…
CVE-2006-3855 - CVSS 6.5 (medium), 2006-08-08: The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init…
CVE-2006-3861 - CVSS 4 (medium), 2006-08-08: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated…
CVE-2006-3853 - CVSS 5.1 (medium), 2006-08-08: Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute…
CVE-2006-3858 - CVSS 2.1 (low), 2006-08-08: IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to…
CVE-2006-3856 - CVSS 2.1 (low), 2006-08-08: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors.
CVE-2006-3862 - CVSS 7.5 (high), 2006-08-08: Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via…
CVE-2004-2319 - CVSS 3.6 (low), 2004-12-31: IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary…
CVE-2004-2490 - CVSS 4.6 (medium), 2004-12-31: Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable.
CVE-2004-2489 - CVSS 4.6 (medium), 2004-12-31: Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR…
CVE-2004-2131 - CVSS 7.2 (high), 2004-01-27: Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary…