Lucene search

K
cvelistMitreCVELIST:CVE-2005-4871
HistoryOct 06, 2007 - 9:00 p.m.

CVE-2005-4871

2007-10-0621:00:00
mitre
www.cve.org

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%

Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1) XMLFileFromVarchar or (2) XMLFileFromClob, or read files via (3) XMLVarcharFromFile or (4) XMLClobFromFile.

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%

Related for CVELIST:CVE-2005-4871