CVE-2007-4418: ibm db2_universal_database

EPSS trend

Probability

1.34%

Chance of exploitation in the next 30 days

Percentile

71%

Versus all other CVEs

30-day change

0.00 pp

From 1.34% on 20-09-2026

20-09-202620-10-2026

EPSS score

1.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

7 links

www-1.ibm.com/support/docview.wss?uid=swg1JR25940Vendor AdvisoryX Refsource AIXAPAR
www.attrition.org/pipermail/vim/2007-August/001765.htmlMailing ListX Refsource VIM
www.vupen.com/english/advisories/2007/2912VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/25339VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/36109VDB EntryX Refsource XF
www-1.ibm.com/support/docview.wss?uid=swg21255352X Refsource CONFIRM
secunia.com/advisories/26471Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory

Related vulnerabilities

CVE-2003-1052ibmdb2+11.31%22y ago20-08-2004 04:00IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.CVE-2001-0051ibmdb2_universal_database2.79%25y ago02-02-2001 05:00IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database.CVE-2001-0052ibmdb2_universal_database1.21%25y ago02-02-2001 05:00IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.CVE-2005-0417ibmdb2_universal_database1.65%21y ago14-02-2005 05:00Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future. In addition, this may be a duplicate of other issues as reported by the vendor.CVE-2008-3857ibmdb2_universal_database0.35%18y ago28-08-2008 17:00The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump.CVE-2008-3852ibmdb2_universal_database3.43%18y ago28-08-2008 17:00Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio in the Visual Studio Net component in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code via unknown vectors.

All vulnerabilities indb2_universal_database

CVE-2007-4418: ibm db2_universal_database

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References