Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:3.5:refresh_10:*:*:*:*:*:*

part: a version: 3.5 update: refresh_10

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-42005 vulnerable 2026-06-08 06:11:07.642831 IBM Db2 on Cloud Pak for Data privilege escalation
HIGH (7.4)
IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264.
Published: 2024-05-29T12:53:04.315Z
Updated: 2024-08-02T19:16:49.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41296 vulnerable 2026-06-08 05:48:30.159924 IBM Db2U cross-site respect forgery
MEDIUM (6.5)
IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237210.
Published: 2022-12-01T17:24:48.698Z
Updated: 2024-08-03T12:42:45.776Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.