156 matches found
CVE-2026-17047
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation...
EUVD-2026-77787
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation...
CVE-2026-17047
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are vulnerable to Cross-Site Request Forgery (CWE-352) in its GUI due to improper request validation. A remote attacker can exploit this to obtain sensitive information and cause low integrity impact (CVSS 5.4, MEDIUM). No specific exploit or in-the...
CVE-2026-17047 IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery []
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation...
Security Bulletin: IBM Db2 Mirror for i is vulnerable to Authentication Bypass by Spoofing [CVE-2026-18065]
Summary The IBM Db2 Mirror for i GUI is vulnerable to Authentication Bypass by Spoofing CVE-2026-18065 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18065 DESCRIPTION: IBM i could allow a remote unauthenticated attacker to gain access to sensitive...
Security Bulletin: IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery [CVE-2026-17047]
Summary The IBM Db2 Mirror for i GUI is vulnerable to Cross-Site Request Forgery CVE-2026-17047 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17047 DESCRIPTION: IBM Db2 Mirror for i could allow a remote attacker to obtain sensitive information due to...
CVE-2026-17483
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure...
CVE-2026-16660
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-16660 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-16660
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 contain an out-of-bounds read (CWE-125) that allows a remote attacker with no privileges to cause a denial of service . The CVSS v3.1 score is 5.3 (MEDIUM) , reflecting a network vector, low complexity, and low availability impact with no effect on ...
EUVD-2026-71488
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-17483 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure...
CVE-2026-17483
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by an improper authorization flaw (CWE-285) in an SQL procedure, allowing a local attacker to delete historical flight-recorder archives. The CVSS v3.1 score is 4.3 (Medium) with a network vector, low complexity, and low privileges requ...
EUVD-2026-71468
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure...
CVE-2026-18567
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
CVE-2026-18567
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by a TOCTOU race condition (CWE-367) involving a predictable Unix domain socket path in a world-writable directory. A local attacker with low privileges could exploit this to obtain information and cause minor availability impact, rated...
EUVD-2026-71602
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
Security Bulletin: IBM Db2 Mirror for i is affected by multiple vulnerabilities [CVE-2026-18567, CVE-2026-16660, CVE-2026-17483]
Summary IBM Db2 Mirror for i is affected by multiple vulnerabilities as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18567 DESCRIPTION: IBM Db2 Mirror for i could allow a local attacker to obtain information due to a race condition involving a predictable...