Vulnerabilities > IBM

DATE CVE VULNERABILITY TITLE RISK
2017-09-14 CVE-2017-1490 Information Exposure vulnerability in IBM Jazz Reporting Service
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information.
network
high complexity
ibm CWE-200
5.3
2017-09-13 CVE-2017-1556 Improper Input Validation vulnerability in IBM API Connect 5.0.7.0/5.0.7.1/5.0.7.2
IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated attacker to use a regex and cause the system to slow or hang.
network
low complexity
ibm CWE-20
6.5
2017-09-13 CVE-2017-1508 Unspecified vulnerability in IBM Informix Dynamic Server 12.10
IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges.
local
low complexity
ibm
6.7
2017-09-12 CVE-2017-1520 Improper Authentication vulnerability in IBM DB2 and DB2 Connect
IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT.
network
high complexity
ibm CWE-287
3.7
2017-09-12 CVE-2017-1519 Improper Input Validation vulnerability in IBM DB2 and DB2 Connect
IBM DB2 10.5 and 11.1 contains a denial of service vulnerability.
network
high complexity
ibm CWE-20
5.9
2017-09-12 CVE-2017-1452 Unspecified vulnerability in IBM DB2 and DB2 Connect
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated privilege and overwrite DB2 files.
local
low complexity
ibm
7.8
2017-09-12 CVE-2017-1451 Unspecified vulnerability in IBM DB2 and DB2 Connect
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access.
local
low complexity
ibm
7.8
2017-09-12 CVE-2017-1439 Unspecified vulnerability in IBM DB2 and DB2 Connect
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access.
local
low complexity
ibm
6.7
2017-09-12 CVE-2017-1438 Unspecified vulnerability in IBM DB2 and DB2 Connect
IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access.
local
low complexity
ibm
6.7
2017-09-12 CVE-2017-1434 Information Exposure vulnerability in IBM DB2 and DB2 Connect
IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user.
local
high complexity
ibm CWE-200
4.7