Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-4033
HistoryAug 28, 2013 - 1:13 p.m.

CVE-2013-4033

2013-08-2813:13:58
CWE-264
[email protected]
web.nvd.nist.gov
280
cve-2013-4033
ibm db2
db2 connect
nvd
explain authority
dml statements

4.6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

JSON

IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority.

Affected configurations

NVD
Node
ibmdb2Match9.7
OR
ibmdb2Match9.8
OR
ibmdb2Match10.1
OR
ibmdb2Match10.5
OR
ibmdb2_connectMatch9.5
OR
ibmdb2_connectMatch9.7
OR
ibmdb2_connectMatch9.8
OR
ibmdb2_connectMatch10.1
OR
ibmdb2_connectMatch10.5

Related

cvelist 1
prion 1
openvas 2
ibm 5
nessus 4
nvd 1
cvelist
cvelist
CVE-2013-4033
2013-08-28 10:00:00
prion
prion
Code injection
2013-08-28 13:13:00
openvas
openvas
IBM Db2 DML Statement Execution Remote Privilege Escalation Vulnerability
2013-09-05 00:00:00
IBM Db2 DML Statement Execution Remote Privilege Escalation Vulnerability - Linux
2013-09-05 00:00:00
ibm
ibm
Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000, and D5100 and IBM Smart Analytics System 1050, 2050, 5600, 5710, 7600, 7700 and 7710 are affected by an unauthorized access to table vulnerability in IBM DB2 (CVE-2013-4033)
2022-09-25 21:06:56
Security Bulletin: Unauthorized Access to Table Vulnerability in DB2 (CVE-2013-4033)
2022-09-25 21:06:56
Security Bulletin: Denial of Service Vulnerability in DB2 for Unix, Linux and Windows's Fast Communications Manager. (CVE-2013-4032)
2022-09-25 21:06:56
nessus
nessus
IBM DB2 10.5 < Fix Pack 1 Security Bypass
2013-09-06 00:00:00
IBM DB2 10.1 < Fix Pack 3 Multiple Vulnerabilities (credentialed check)
2013-10-16 00:00:00
IBM DB2 10.1 < Fix Pack 3 Multiple Vulnerabilities
2013-10-16 00:00:00
nvd
nvd
CVE-2013-4033
2013-08-28 13:13:58

4.6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

JSON
Related for CVE-2013-4033
cvelist1prion1openvas2ibm5nessus4nvd1