CVE-2022-22384 IBM Security Verify Privilege improper input validation

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due to hazardous input validation. IBM X-Force ID: 221961...

CVE-2022-22384

CVE-2022-22384 affects IBM Security Verify Privilege On-Premises 11.5. The root cause is hazardous input validation that could allow an attacker to modify messages returned by the server. Impact is information integrity/obfuscation risk (partial information exposure as per the linked CVSS; overal...

CVE-2022-22377 IBM Security Verify Privilege information disclosure

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. I...

CVE-2022-22377

CVE-2022-22377 affects IBM Security Verify Privilege On-Premises 11.5. The vulnerability stems from failure to properly enable HTTP Strict Transport Security, enabling a remote attacker to obtain sensitive information via man-in-the-middle techniques. The NVD metrics show a NETWORK attack vector ...

CVE-2022-22377 IBM Security Verify Privilege information disclosure

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. I...

CVE-2023-40372

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables. IBM X-Force ID: 263499...

CVE-2023-40373

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574...

CVE-2023-38719

IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation on DPF. IBM X-Force ID: 261607...

Design/Logic Flaw

IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation on DPF. IBM X-Force ID: 261607...

Design/Logic Flaw

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574...

Code injection

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables. IBM X-Force ID: 263499...

CVE-2023-30991

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 254037...

CVE-2023-40374

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 is vulnerable to denial of service with a specially crafted query statement. IBM X-Force ID: 263575...

Design/Logic Flaw

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 254037...

CVE-2023-40373 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574...

CVE-2023-40373

CVE-2023-40373 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server). The vulnerability allows a denial of service via a specially crafted query containing common table expressions. Public details come from IBM security bulletins and include affected Db2 releases and required...

CVE-2023-38719

CVE-2023-38719 affects IBM Db2 11.5 with local access privileges; a local user can cause a denial of service during database deactivation on DPF. Remediation: upgrade to Db2 11.5.9 (or later) per IBM security bulletins.

CVE-2023-40372 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables. IBM X-Force ID: 263499...

CVE-2023-40372 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables. IBM X-Force ID: 263499...

CVE-2023-40372

CVE-2023-40372 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) 11.5, vulnerable to denial of service via a specially crafted SQL statement using External Tables. IBM X-Force ID: 263499. Reported CVSS base scores in sources range from 5.3 (medium) to 7.5 (high) depending...