CVSS: 8.5EPSS: 0%CPEs: 19EXPL: 0CVE-2013-6744
https://notcve.org/view.php?id=CVE-2013-6744
The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE_EXTERNAL_ROUTINE authority. La infraestructura Stored Procedure en IBM DB2 9.5, 9.7 anterior a FP9a, 10.1 anterior a FP3a y 10.5 anterior a FP3a en Windows permite a usuarios remotos autenticados ganar privilegios mediante el aprovechamiento del privilegio CONNECT y la autoridad CREATE_EXTERNAL_ROUTINE. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC98849 http://www-01.ibm.com/support/docview.wss?uid=swg1IC99478 http://www-01.ibm.com/support/docview.wss?uid=swg1IC99480 http://www-01.ibm.com/support/docview.wss?uid=swg1IC99481 http://www.ibm.com/support/docview.wss? • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.0EPSS: 0%CPEs: 43EXPL: 0CVE-2013-6717
https://notcve.org/view.php?id=CVE-2013-6717
The OLAP query engine in IBM DB2 and DB2 Connect 9.7 through FP9, 9.8 through FP5, 10.1 through FP3, and 10.5 through FP2, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service (database outage and deactivation) via unspecified vectors. El motor de consultas OLAP en IBM DB2 y DB2 Connect 9.7 hasta FP9, 9.8 hasta FP3, y 10.6 hasta FP2, y la pureScale Feature 9.8 para Enterprise Server Edition, permite ausuarios autenticados remotamente causar denegación de servicio (interrupción de la base de datos y desactivación) a través de vectores no especificados. • http://secunia.com/advisories/56451 http://www-01.ibm.com/support/docview.wss?uid=swg1IC95641 http://www-01.ibm.com/support/docview.wss?uid=swg1IC97737 http://www-01.ibm.com/support/docview.wss?uid=swg1IC97738 http://www-01.ibm.com/support/docview.wss?uid=swg1IC97762 http://www-01.ibm.com/support/docview.wss? •
CVSS: 4.0EPSS: 0%CPEs: 11EXPL: 0CVE-2013-5466
https://notcve.org/view.php?id=CVE-2013-5466
The XSLT library in IBM DB2 and DB2 Connect 9.5 through 10.5, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service via unspecified vectors. La librería XSLT en IBM DB2 y DB2 Connect 9.5 hasta 10.5, y DB2 pureScale Feature 9.8 para Enterprise Server Edition, permite a usuarios remotos autenticados causar una denegación de servicio a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC97402 http://www-01.ibm.com/support/docview.wss?uid=swg1IC97470 http://www-01.ibm.com/support/docview.wss?uid=swg1IC97471 http://www-01.ibm.com/support/docview.wss?uid=swg1IC97472 http://www-01.ibm.com/support/docview.wss? •
CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0CVE-2013-4032
https://notcve.org/view.php?id=CVE-2013-4032
The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, when a multi-node configuration is used, allows remote attackers to cause a denial of service via vectors involving arbitrary data. Fast Communications Manager (FCM) en IBM DB2 Enterprise Server Edition y Advanced Enterprise Server Edition 10.1 anterior a la versión FP3 y 10.5, cuando se utiliza una configuración de varios nodos, permite a atacantes remotos causar una denegación de servicio a través de vectores que involucren datos arbitrarios. • http://www-01.ibm.com/support/docview.wss?uid=swg1IC94434 http://www-01.ibm.com/support/docview.wss?uid=swg1IC94939 http://www-01.ibm.com/support/docview.wss?uid=swg21650231 https://exchange.xforce.ibmcloud.com/vulnerabilities/86092 • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0CVE-2013-4024
https://notcve.org/view.php?id=CVE-2013-4024
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network. IBM Data Studio Web Console 3.x anterior a la versión 3,2, Optim Performance Manager 5.x anterior a la versión 5.2, InfoSphere Optim Configuration Manager 2.x anterior a la versión 2.2, y DB2 Recovery Expert 2.x soporta HTTP en la Web Console, lo que permite a atacantes remotos leer cookies de sesión mediante la captura de tráfico de red. • http://www-01.ibm.com/support/docview.wss?uid=swg21650504 https://exchange.xforce.ibmcloud.com/vulnerabilities/85931 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •