IBM Db2 On Cloud Pak For Data vulnerabilities
2 vulnerabilities
Known vulnerabilities in IBM Db2 On Cloud Pak For Data, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2022-41297ibm · db2_on_cloud_pak_for_data +2 moreIBM Db2U cross-site request forgeryIBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237212.EPSS0.25%HighCVE-2023-42005ibm · db2 +2 moreIBM Db2 on Cloud Pak for Data privilege escalationIBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264.EPSS0.29%