IBM DB2 Mirror For I 7.4
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:db2_mirror_for_i:7.4:*:*:*:*:*:*:*
part: a version: 7.4 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Db2 Mirror For I (1d21b389-67c8-571e-9674-46da14f7af71) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-17047 |
vulnerable | 2026-09-16 04:33:03.783172 |
IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery []
MEDIUM (5.4)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation.
Published: 2026-09-14T19:42:16.607Z
Updated: 2026-09-14T20:13:31.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16660 |
vulnerable | 2026-09-16 04:32:56.813617 |
IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
MEDIUM (5.3)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
Published: 2026-09-04T16:42:34.324Z
Updated: 2026-09-10T21:00:33.577Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36117 |
vulnerable | 2026-06-08 07:21:01.022502 |
IBM Db2 Mirror for i session fixation
MEDIUM (6.3)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
Published: 2025-07-23T14:27:08.061Z
Updated: 2025-08-18T01:30:05.928Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36116 |
vulnerable | 2026-06-08 07:21:01.020051 |
IBM Db2 Mirror for i cross-site websocket hijacking
MEDIUM (6.3)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that the user is not allowed to perform.
Published: 2025-07-23T14:26:06.865Z
Updated: 2025-08-18T01:30:27.202Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47741 |
vulnerable | 2026-06-08 06:14:25.494499 |
IBM i information disclosure
MEDIUM (5.3)
IBM i 7.3, 7.4, 7.5, IBM i Db2 Mirror for i 7.4 and 7.5 web browser clients may leave clear-text passwords in browser memory that can be viewed using common browser tools before the memory is garbage collected. A malicious actor with access to the victim's PC could exploit this vulnerability to gain access to the IBM i operating system. IBM X-Force ID: 272532.
Published: 2023-12-18T19:09:58.816Z
Updated: 2024-09-16T18:43:12.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43928 |
vulnerable | 2026-06-08 05:49:35.030751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.