IBMBE05E9FBADF93A17A123EBBB9DADBC07DD21743E04787DDC3467185B9FEA7470Security Bulletin: IBM® Db2® is vulnerable to denial of service with a specially crafted query (CVE-2023-47158)
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
24.4%
Summary
If you use IBM® Db2® as your database in your IBM Datacap deployment, please follow the Db2 security bulletin referred in the Title to remedy the vulnerability.
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Datacap | 9.1.4 |
| IBM Datacap | 9.1.5 |
| IBM Datacap | 9.1.6 |
| IBM Datacap | 9.1.7 |
| IBM Datacap | 9.1.8 |
| IBM Datacap | 9.1.9 |
Remediation/Fixes
Please follow the Db2 Security Bulletin in the link below to remedy the vulnerability: <https://www.ibm.com/support/pages/security-bulletin-ibm®-db2®-vulnerable-denial-service-specially-crafted-query-cve-2023-47158>
Workarounds and Mitigations
None
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| datacap navigator | eq | 9.1.7 | |
| datacap navigator | eq | 9.1.8 | |
| datacap navigator | eq | 9.1.9 |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
24.4%