CVE-2023-33854: IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass…

PriorityP430medium5.3CVSS 3.1

AVNACHPRLUINSUCNIHAN

EPSS

0.19%

8.6th percentile

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and manipulate input data using man in the middle techniques.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	>= 4.8 < 5.4	5.4
ibm	db2_on_cloud_pak_for_data_and_db2_warehouse_on_cloud_pak_for_data	4.8.0 – 1.8.4	—
ibm	db2_on_cloud_pak_for_data_and_db2_warehouse_on_cloud_pak_for_data	5.0.0 – 5.3.0	—
ibm	db2_warehouse	>= 4.8 < 5.4	5.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.