Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-27868
HistoryJul 10, 2023 - 4:15 p.m.

Code injection

2023-07-1016:15:00
PRIOn knowledge base
www.prio-n.com
4
ibm
db2
jdbc driver
code injection
remote attacker
arbitrary code
system vulnerability

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.3%

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing plugin classes. By sending a specially crafted request using the named pluginClassName class, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 249516.

CPENameOperatorVersion
db2eq10.5.0.11
db2eq11.1.4.7
db2eq11.5

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.3%

Related for PRION:CVE-2023-27868