Db2 Mirror For I
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:db2_mirror_for_i:7.6:*:*:*:*:*:*:*
part: a version: 7.6 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Db2 Mirror For I (1d21b389-67c8-571e-9674-46da14f7af71) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-17047 |
vulnerable | 2026-09-16 04:33:03.786410 |
IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery []
MEDIUM (5.4)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation.
Published: 2026-09-14T19:42:16.607Z
Updated: 2026-09-14T20:13:31.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16660 |
vulnerable | 2026-09-16 04:32:56.820873 |
IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
MEDIUM (5.3)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
Published: 2026-09-04T16:42:34.324Z
Updated: 2026-09-10T21:00:33.577Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36117 |
vulnerable | 2026-06-08 07:21:01.022684 |
IBM Db2 Mirror for i session fixation
MEDIUM (6.3)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
Published: 2025-07-23T14:27:08.061Z
Updated: 2025-08-18T01:30:05.928Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36116 |
vulnerable | 2026-06-08 07:21:01.021997 |
IBM Db2 Mirror for i cross-site websocket hijacking
MEDIUM (6.3)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that the user is not allowed to perform.
Published: 2025-07-23T14:26:06.865Z
Updated: 2025-08-18T01:30:27.202Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.