Ibm Db2 Universal Database 漏洞

时间轴

版本

9.026
7.x16
8.x14
8.014
8.112

修正

Official Fix94
Temporary Fix0
Workaround2
Unavailable2
Not Defined8

易受攻击性

High2
Functional0
Proof-of-Concept46
Unproven4
Not Defined54

访问向量

Not Defined0
Physical0
Local20
Adjacent4
Network82

身份验证

Not Defined0
High0
Low32
None74

用户交互

Not Defined0
Required0
None106

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤50
≤628
≤722
≤86
≤92
≤1046

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤58
≤634
≤714
≤80
≤934
≤1014

VulDB

≤10
≤20
≤30
≤42
≤50
≤628
≤722
≤86
≤92
≤1046

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k8
<10k28
<25k26
<50k40
<100k4
≥100k0

本日攻击

<1k100
<2k0
<5k2
<10k0
<25k4
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (23): 6.0, 6.1, 7, 7 FP12, 7.0, 7.1, 7.2 FP9, 8 FP12, 8 FP13, 8.0, 8.1, 8.1 FP6, 8.1 FP8, 8.2, 8.2 FP3, 8.2 FP16, 9.0, 9.1, 9.1 FP2, 9.2, 9.3, 9.4, XP

Link to Product Website: https://www.ibm.com/

软件类型: Database Software

已发布BaseTemp漏洞0day今天修正CTICVE
2010-10-056.56.2IBM DB2 Universal Database Audit Facility 弱身份验证$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2010-3739
2010-04-236.35.7IBM DB2 Universal Database Data 弱加密$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2009-3555
2009-12-025.95.3IBM DB2 Universal Database User Account 权限升级$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.02CVE-2009-4150
2009-01-165.34.8IBM DB2 Universal Database 权限升级$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.03CVE-2009-0173
2009-01-165.34.8IBM DB2 Universal Database 权限升级$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.05CVE-2009-0172
2008-09-089.89.4IBM DB2 Universal Database 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2008-3960
2008-08-289.88.8IBM DB2 Universal Database 信息公开$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2008-3857
2008-08-289.89.4IBM DB2 Universal Database 权限升级$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2008-3856
2008-08-289.88.8IBM DB2 Universal Database Administration Server DAS 权限升级$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2008-3855
2008-08-289.88.8IBM DB2 Universal Database sqlrlaka 内存损坏$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2008-3854
2008-08-2810.09.5IBM DB2 Universal Database DAS 内存损坏$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2008-3853
2008-08-289.88.8IBM DB2 Universal Database Stored Procedure 权限升级$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2008-3852
2008-06-095.35.3IBM DB2 Universal Database Local Privilege Escalation$25k-$100k$0-$5kNot DefinedNot Defined0.02
2008-04-169.38.4IBM DB2 Universal Database Administration Server 内存损坏$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2007-5758
2008-04-168.47.6IBM DB2 Universal Database Administration Server 权限升级$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2007-5664
2008-02-125.35.3IBM DB2 Universal Database Local Privilege Escalation$25k-$100k$0-$5kNot DefinedNot Defined0.04
2008-02-049.89.4IBM DB2 Universal Database JAR File Administration 拒绝服务$25k-$100k$0-$5kNot DefinedOfficial Fix0.04CVE-2007-3676
2008-02-049.89.4IBM DB2 Universal Database SYSPROC.NNSTAT 拒绝服务$25k-$100k$0-$5kNot DefinedOfficial Fix0.08CVE-2007-3676
2008-02-049.88.5IBM DB2 Universal Database ATTACH 拒绝服务$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2007-3676
2008-02-049.98.9IBM DB2 Universal Database SetUID Binary 内存损坏$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2008-0699
2008-02-049.88.8IBM DB2 Universal Database DB2DART 内存损坏$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.02CVE-2008-0698
2008-02-049.18.2IBM DB2 Universal Database DB2 Commands 权限升级$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2008-0697
2008-02-049.88.8IBM DB2 Universal Database SYSPROC.ADMIN_SP_C 权限升级$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.05CVE-2008-0696
2008-02-049.88.5IBM DB2 Universal Database DAS 权限升级$25k-$100k$0-$5kUnprovenOfficial Fix0.00CVE-2007-5757
2008-02-044.84.3IBM DB2 Universal Database DB2PD DB2INSTANCE 权限升级$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.04CVE-2008-0696

81 更多条目未显示

更多条目由 Ibm

Do you need the next level of professionalism?

Upgrade your account now!