Ein entfernter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 on Cloud Pak for Data ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.
[UPDATE] [hoch] IBM DB2: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-12 08:29 UTC
- Importiert: 2026-10-13 09:10 UTC
- Quelle-ID:
cert_bund - uid_hash:
be87136d495bf704126fedab76a9dc51b8fddbb4af4326216546a6e35afebf93
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
HIGH |
7.5 |
2021-07-06 |
||||
HIGH |
MEDIUM |
5.9 |
2021-10-29 |
||||
HIGH |
2022-03-25 |
||||||
HIGH |
MEDIUM |
5.9 |
2022-04-05 |
||||
HIGH |
HIGH |
7.5 |
2022-07-21 |
||||
HIGH |
2023-10-11 |
||||||
HIGH |
HIGH |
8.8 |
2023-09-21 |
||||
HIGH |
2023-11-09 |
||||||
HIGH |
HIGH |
7.5 |
2024-04-04 |
||||
HIGH |
HIGH |
7.8 |
2024-03-19 |
||||
HIGH |
MEDIUM |
6.1 |
2024-04-06 |
||||
HIGH |
HIGH |
7.4 |
2024-01-16 |
||||
HIGH |
HIGH |
7.4 |
2024-01-16 |
||||
HIGH |
HIGH |
8.6 |
2024-03-27 |
||||
HIGH |
HIGH |
7.5 |
2024-03-05 |
||||
HIGH |
MEDIUM |
4.5 |
2024-05-08 |
||||
HIGH |
HIGH |
7.3 |
2024-04-17 |
||||
HIGH |
HIGH |
7.5 |
2024-05-09 |
||||
HIGH |
HIGH |
8.1 |
2024-05-06 |
||||
HIGH |
MEDIUM |
4 |
2024-04-28 |
||||
HIGH |
HIGH |
7.5 |
2024-06-28 |
||||
HIGH |
CRITICAL |
9.1 |
2024-06-28 |
||||
HIGH |
HIGH |
7.5 |
2024-06-17 |
||||
HIGH |
MEDIUM |
4 |
2024-08-09 |
||||
HIGH |
HIGH |
7.5 |
2024-05-13 |
||||
HIGH |
|||||||
HIGH |
MEDIUM |
5.3 |
2024-08-01 |
||||
HIGH |
MEDIUM |
5.3 |
2024-08-01 |
||||
HIGH |
|||||||
HIGH |
HIGH |
7.3 |
2024-08-30 |
||||
HIGH |
HIGH |
7.5 |
2024-09-10 |
||||
HIGH |
|||||||
HIGH |
MEDIUM |
4.3 |
2024-10-03 |
||||
HIGH |
|||||||
HIGH |
HIGH |
8.8 |
2024-07-15 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
Oracle Linux Security Advisory ELSA-2026-73519 vom 2026-10-09 |
EXTERNAL | - | wid_csaf |
| VENDOR | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |