CVE-2023-47747
published 2024-01-22CVE-2023-47747: IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a…
PriorityP431medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.74%
50.2th percentile
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | db2 | 10.5.0.0 – 10.5.0.11 | — |
| ibm | db2 | 11.1.0.0 – 11.1.4.7 | — |
| ibm | db2 | 11.5 – 11.5.9 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://exchange.xforce.ibmcloud.com/vulnerabilities/272646https://security.netapp.com/advisory/ntap-20240307-0002/https://www.ibm.com/support/pages/node/7105502https://exchange.xforce.ibmcloud.com/vulnerabilities/272646https://security.netapp.com/advisory/ntap-20240307-0002/https://www.ibm.com/support/pages/node/7105502
2024-01-22
Published