CVE-2023-27558 IBM Db2 privilege escalation

IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected...

CVE-2023-29256 IBM Db2 information disclosure

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046...

CVE-2023-29256 IBM Db2 information disclosure

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046...

CVE-2023-29256

CVE-2023-29256 : IBM Db2 for Linux/UNIX/Windows (incl. Db2 Connect Server) in versions 10.5, 11.1 and 11.5 is vulnerable to information disclosure due to improper privilege management when certain federation features are used. Affected products include Db2 and Db2 Connect Server; exploitation is ...

CVE-2023-27868 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing plugin classes. By sending a specially crafted request using the named...

CVE-2023-27868 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing plugin classes. By sending a specially crafted request using the named...

CVE-2023-27868

CVE-2023-27868 (IBM Db2 JDBC Driver): A remote authenticated attacker could execute arbitrary code due to an unchecked class instantiation when providing plugin classes, via a crafted request using the pluginClassName field. Affected: IBM Db2 JDBC Driver for Db2 on Linux/UNIX/Windows 10.5, 11.1, ...

CVE-2023-27867 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection. By sending a specially crafted request using the property clientRerouteServerListJNDIName, an attacker could exploit this...

CVE-2023-27867

CVE-2023-27867 affects IBM Db2 JDBC Driver for Db2 on Linux/UNIX/Windows (10.5, 11.1, 11.5). A remote authenticated attacker could execute arbitrary code via JNDI Injection by sending a crafted request using the clientRerouteServerListJNDIName property. The connected IBM advisories confirm this i...

CVE-2023-27867 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection. By sending a specially crafted request using the property clientRerouteServerListJNDIName, an attacker could exploit this...

CVE-2023-27869 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

CVE-2023-27869 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

CVE-2023-27869

CVE-2023-27869 affects IBM Db2 JDBC Driver for Db2 on Linux/UNIX/Windows (versions 10.5, 11.1, 11.5). The issue is caused by an unchecked logger injection via the named traceFile property, enabling a remote authenticated attacker to execute arbitrary code on the system. IBM bulletins list this al...

CVE-2023-30449 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439...

CVE-2023-30449 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439...

CVE-2023-30449

CVE-2023-30449 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) versions 10.5, 11.1, and 11.5, with denial of service via a specially crafted query. Connected documents confirm this CVE across multiple IBM bulletins and advisories (Cloud Pak System/Data, Db2 Big SQL, Ope...

CVE-2023-30445 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357...

CVE-2023-30445 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357...

CVE-2023-30445

CVE-2023-30445 affects IBM Db2 for Linux, UNIX and Windows (incl. Db2 Connect Server) 10.5, 11.1 and 11.5. The vulnerability allows denial of service via a specially crafted query on certain tables. Affected products shown in connected sources include multiple IBM bulletins and Red Hat references...

CVE-2023-30448 IBM Db2 denial of service

IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437...