// For flags

CVE-2009-1239

 

Severity Score

5.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query.

IBM DB2 v9.1 anteriores a FP7 devuelve resultados incorrectos en ciertas situaciones relacionadas con la orden de aplicación de una identificación INNER JOIN y una identificación OUTER JOIN, lo que permitiría a atacantes conseguir información sensible a través de una petición manipulada.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-04-03 CVE Reserved
  • 2009-04-03 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-09-06 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 <= 9.1
Search vendor "Ibm" for product "Db2" and version " <= 9.1"
fp6a
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
-
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
connect_server
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
enterprise_server
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
express_server
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
personal
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
workgroup_server
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp1
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp1, unix
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp1, windows
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp2
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp3
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp3a
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp4
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp4a
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp5
Affected
Ibm
Search vendor "Ibm"
 Db2
Search vendor "Ibm" for product "Db2"
 9.1
Search vendor "Ibm" for product "Db2" and version "9.1"
fp6
Affected