cvedb.io
CVE-2023-29257
HIGH · CVSS 7.2
EPSS exploitation probability: 0%
Published 2023-04-26T13:15:08.853 · Last modified 2026-06-17T05:49:40.473

Summary

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM X-Force ID: 252011.

Affected products

ibm — db2

Does this affect you?

Add your gear to cvedb and we'll alert you only when ibm ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.