6.7
Medium
CVE-2020-4230 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of…
Description
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privilege when an authenticated local attacker with special permissions executes specially crafted Db2 commands. IBM X-Force ID: 175212.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DB2 for Linux- UNIX and Windows | 11.5 | No fix stated |
| DB2 for Linux- UNIX and Windows | 11.1 | No fix stated |
Other CVEs of DB2 for Linux- UNIX and Windows
The 13 CVEs of DB2 for Linux- UNIX and Windows →
CVE-2021-29702
Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service…
7.5
High
CVE-2020-4642
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local…
6.2
Medium
CVE-2020-4420
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an…
7.5
High
CVE-2020-4414
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local…
5.1
Medium