Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-38003

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214.

Published

2023-12-04T01:15:08.217

Last Modified

2024-11-21T08:12:40.753

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ibm	db2	10.5	Yes
Application	ibm	db2	10.5	Yes
Application	ibm	db2	10.5	Yes
Application	ibm	db2	11.1	Yes
Application	ibm	db2	11.1	Yes
Application	ibm	db2	11.1	Yes
Application	ibm	db2	11.5	Yes
Application	ibm	db2	11.5	Yes
Application	ibm	db2	11.5	Yes

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/260214 VDB Entry, Vendor Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20240119-0001/ ([email protected])
https://www.ibm.com/support/pages/node/7078681 Patch, Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/260214 VDB Entry, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20240119-0001/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.ibm.com/support/pages/node/7078681 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)