Lucene search

IBM98C6A149B4D1CA18622C4E588CBF15E42FBE612069D8CB7ACD6A796E8FBA03C5

HistorySep 07, 2023 - 9:37 p.m.

Security Bulletin: Multiple security vulnerabilities Affect IBM Db2 Database Server shipped with IBM OpenPages

2023-09-0721:37:54

www.ibm.com

ibm openpages

ibm db2 database server

security vulnerabilities

cve-2023-30447

cve-2023-30446

cve-2023-30443

cve-2023-30448

cve-2023-30445

cve-2023-30449

cve-2023-23487

cve-2023-30431

cve-2023-27869

cve-2023-27867

cve-2023-27868

cve-2023-30442

cve-2023-29256

cve-2023-27558

cve-2023-35012

remediation

ibm openpages with watson

grc platform 8.2

workarounds

mitigations

upgrade

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

52.3%

JSON

Summary

IBM® Db2® Database Server is shipped as a supporting program of IBM OpenPages. Information about a security vulnerability affecting IBM Db2 Database Server has been published in multiple security bulletins.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)

IBM OpenPages with Watson

9.0, 8.3, 8.2

Remediation/Fixes

The IBM Db2 relevant vulnerabilities are CVE-2023-30447, CVE-2023-30446, CVE-2023-30443, CVE-2023-30448, CVE-2023-30445, CVE-2023-30449, CVE-2023-23487, CVE-2023-30431, CVE-2023-27869, CVE-2023-27867, CVE-2023-27868, CVE-2023-30442, CVE-2023-29256, CVE-2023-27558 and CVE-2023-35012

Please consult the security bulletins for IBM DB2 Database Server in the Reference section for remediation details.

Principal Product and Version(s)	Affected Supporting Product and Version
IBM OpenPages 9.0	IBM DB2 Server 11.5.5
IBM DB2 Server 11.5.8
IBM OpenPages with Watson 8.3	IBM DB2 Server 11.5.5
IBM DB2 Server 11.5.8
IBM OpenPages GRC Platform 8.2	IBM DB2 Server 11.5
IBM DB2 Server 11.1.4.4

For IBM OpenPages GRC Platform 8.0/8.1/8.2 customers, IBM recommends to upgrade to a fixed and supported versions** 8.3 or 9.0** of the product.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmopenpages_with_watsonMatch8.2

ibmopenpages_with_watsonMatch8.3

ibmopenpages_with_watsonMatch9.0

CPENameOperatorVersion
ibm openpages with watsoneq8.2
ibm openpages with watsoneq8.3
ibm openpages with watsoneq9.0

Name	Operator	Version
ibm openpages with watson	eq	8.2
ibm openpages with watson	eq	8.3
ibm openpages with watson	eq	9.0

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

52.3%

JSON

Related for 98C6A149B4D1CA18622C4E588CBF15E42FBE612069D8CB7ACD6A796E8FBA03C5