Lucene search

PRIOn knowledge basePRION:CVE-2023-47747

HistoryJan 22, 2024 - 8:15 p.m.

Code injection

2024-01-2220:15:00

PRIOn knowledge base

www.prio-n.com

ibm db2

code injection

vulnerability

denial of service

10.1

10.5

11.1

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646.

CPENameOperatorVersion
db2ge10.5.0.0
db2le10.5.0.11
db2ge11.1.0.0
db2le11.1.4.7
db2ge11.5
db2le11.5.9

Name	Operator	Version
db2	ge	10.5.0.0
db2	le	10.5.0.11
db2	ge	11.1.0.0
db2	le	11.1.4.7
db2	ge	11.5
db2	le	11.5.9

References

exchange.xforce.ibmcloud.com/vulnerabilities/272646

security.netapp.com/advisory/ntap-20240307-0002/

www.ibm.com/support/pages/node/7105502