CVE-2023-47746CWE-20

IBM Db2 denial of service

Medium · published January 22, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00738 · 54.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-01-22T18:42Z
EPSS history
Timeline
  • 22 JAN 18:42Z
    IBM Db2 denial of service
    cvelistv5