CVE-2023-29257

IBM Db2 code execution

High · published April 26, 2023

CVSS v3.1
7.2
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM X-Force ID: 252011.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01526 · 74.5th percentile
Published
2023-04-26T12:56Z
EPSS history
Timeline
  • 26 APR 12:56Z
    IBM Db2 code execution
    cvelistv5