The vulnerability of the IBM DB2 database management system, related to insufficient validation of input data, allows a hacker to trigger a service failure.

🗓️ 07 Apr 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Db2 vulnerability from insufficient input validation can trigger service failure via Load command.

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2023	30 Jun 202315:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager vulnerable to multiple issues due to IBM Db2	6 Jun 202315:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM DB2 affects IBM Application Performance Management products.	13 Sep 202307:37	–	ibm
IBM Security Bulletins	Security Bulletin: One or more security vulnerabilities has been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics (CVE-2022-43927,CVE-2022-43929)	4 Apr 202321:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance - Identity Manager have multiple vulnerabilities	19 Mar 202411:50	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM DB2 used by IBM Security Verify Governance, Identity Manager virtual appliance component	21 Mar 202317:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilties are affecting IBM Db2 Big SQL on Cloud Pak for Data	4 Jan 202512:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Db2 affect Cloud Pak System	1 Aug 202419:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	20 Jun 202314:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM Db2, IBM Java Runtime, and Golang Go may affect IBM Spectrum Protect Server (CVE-2022-21626, CVE-2022-41717, CVE-2022-43929, CVE-2022-43927, CVE-2022-43930)	20 Mar 202301:16	–	ibm

Vulners

Node

ibm ibm_db2Match11.1

OR

ibm ibm_db2Match11.5

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/241676
ibm	www.ibm.com/support/pages/node/6953763
web	www.web.nvd.nist.gov/view/vuln/detail

07 Apr 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 24.9

CVSS 36.2

EPSS0.00739

Db2 database input data validation service failure load command