CVE-2014-8910

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a crafted XML/XSLT function in a SELECT statement...

CVE-2015-1935

The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

CVE-2015-0157

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash by leveraging an unspecified scalar function in a SQL statement...

CVE-2015-1883

IBM DB2 contains a file-disclosure vulnerability (CVE-2015-1883) in the automated maintenance feature. A remote, authenticated DB2 user with elevated privilege can manipulate an automated-maintenance policy stored procedure to view files owned by the DB2 fenced ID (Unix/Linux) or the Windows admi...

CVE-2015-1883

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read certain administrative files via crafted use of an automated-maintenance policy stored procedure...

CVE-2015-1922

The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors...

CVE-2015-0157

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash by leveraging an unspecified scalar function in a SQL statement...

CVE-2015-1935

IBM DB2 LUW contains a denial-of-service vulnerability in scalar functions (CVE-2015-1935). A remote, authenticated user can cause the DB2 instance to terminate abnormally or execute arbitrary code. Affected are IBM DB2 LUW releases 9.7 (through FP10), 9.8 (through FP5), 10.1 (before FP5), and 10...

CVE-2015-0157

CVE-2015-0157 affects IBM DB2 LUW and InfoSphere BigInsights; a remote authenticated DB2 user can crash the server by sending a crafted SQL using scalar functions (ROUND/TRUNCATE). CVSS base 6.8. Affected: DB2 LUW 9.7/9.8/10.1/10.5 lines; BigInsights’ Big SQL includes DB2 components. Remediation:...

CVE-2015-1935

The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

CVE-2014-8910

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a crafted XML/XSLT function in a SELECT statement...

CVE-2014-8910

Summary of CVE-2014-8910 (IBM DB2) : A file-disclosure vulnerability in IBM DB2 allows a remote authenticated DB2 user to read arbitrary text files by issuing a specially crafted XML/XSLT function inside a SELECT statement. Affected DB2 versions across platforms include 9.7 (FP10 and earlier), 9....

CVE-2015-1922

CVE-2015-1922 affects IBM DB2 LUW: the Data Movement feature allows a remote, authenticated user with elevated privileges to bypass access checks and delete rows from a table. The issue arises from insufficient privilege validation in Data Movement. Affected releases include IBM DB2 LUW v9.7 (thr...

CVE-2015-1883: Exposure of Sensitive Information to an Unauthorized Actor

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read certain administrative files via crafted use of an automated-maintenance policy stored procedure...

CVE-2015-1935: Undefined Security Weakness

The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

CVE-2014-8910: Improper Neutralization of Special Elements in Output Used by a Downstream Component

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a crafted XML/XSLT function in a SELECT statement...

CVE-2015-1922: Improper Access Control

The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors...

CVE-2015-0157: Improper Input Validation

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash by leveraging an unspecified scalar function in a SQL statement...

PT-2015-4117

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through 9.7 FP10 IBM DB2 versions 9.8 through 9.8 FP5 IBM DB2 versions 10.1 through 10.1 FP4 IBM DB2 versions 10.5 through 10.5 FP5 Description The issue allows remote authenticated users to read arbitrary text files via a...

PT-2015-2765

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through FP10 IBM DB2 versions 9.8 through FP5 IBM DB2 version 10.1 before FP5 IBM DB2 versions 10.5 through FP5 Description The issue is related to errors in the code of the IBM DB2 database management system. It can be...