CVE-2022-41297

published 2022-12-01

CVE-2022-41297: IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted…

Priority P4 29 medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C N I H A N

IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237212.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	db2_on_cloud_pak_for_data	>= 3.5 < 4.6	4.6
ibm	db2_warehouse_on_cloud_pak_for_data	>= 3.5 < 4.6	4.6
ibm	db2u	—	—
ibm	db2u	—	—
ibm	db2u	—	—
ibm	db2u	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-352