CVE-2013-6744 — IBM DB2 vulnerability

CWE-2643 documents3 sources
Severity
8.5HIGHNVD
EPSS
2.1%
top 16.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedMay 30
Latest updateMay 17

Description

The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE_EXTERNAL_ROUTINE authority.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 6.8 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/db218 versions+17

🔴Vulnerability Details

2
GHSA
GHSA-p65f-vv29-8pq2: The Stored Procedure infrastructure in IBM DB2 9↗2022-05-17
▶
CVEList
CVE-2013-6744: The Stored Procedure infrastructure in IBM DB2 9↗2014-05-30
▶
CVE-2013-6744 — IBM DB2 vulnerability | cvebase