Vulnerabilities > IBM > High

DATE CVE VULNERABILITY TITLE RISK
2023-07-10 CVE-2023-30442 Unspecified vulnerability in IBM DB2 11.1.4.7/11.5
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options.
network
low complexity
ibm
7.5
2023-07-10 CVE-2023-30445 Unspecified vulnerability in IBM DB2 10.5.0.11/11.1.4.7/11.5
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables.
network
low complexity
ibm
7.5
2023-07-10 CVE-2023-30446 Unspecified vulnerability in IBM DB2 10.5.0.11/11.1.4.7/11.5
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables.
network
low complexity
ibm
7.5
2023-07-10 CVE-2023-30447 Unspecified vulnerability in IBM DB2 10.5.0.11/11.1.4.7/11.5
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables.
network
low complexity
ibm
7.5
2023-07-10 CVE-2023-30448 Unspecified vulnerability in IBM DB2 10.5.0.11/11.1.4.7/11.5
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables.
network
low complexity
ibm
7.5
2023-07-10 CVE-2023-30449 Unspecified vulnerability in IBM DB2 10.5.0.11/11.1.4.7/11.5
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query.
network
low complexity
ibm
7.5
2023-06-27 CVE-2023-30993 Information Exposure vulnerability in IBM Cloud PAK for Security
IBM Cloud Pak for Security (CP4S) 1.9.0.0 through 1.9.2.0 could allow an attacker with a valid API key for one tenant to access data from another tenant's account.
network
low complexity
ibm CWE-200
7.5
2023-06-27 CVE-2023-22593 Unspecified vulnerability in IBM Robotic Process Automation
IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to security misconfiguration of the Redis container which may provide elevated privileges.
local
low complexity
ibm
7.8
2023-06-27 CVE-2023-26276 Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Qradar Security Information and Event Manager 7.5.0
IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-327
7.5
2023-06-22 CVE-2023-28956 Unspecified vulnerability in IBM Spectrum Protect Backup-Archive Client
IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls.
local
low complexity
ibm
7.8