Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2014-8901
HistoryDec 18, 2014 - 4:59 p.m.

CVE-2014-8901

2014-12-1816:59:18
CWE-399
ibm
web.nvd.nist.gov
29
ibm
db2
fp10
security
vulnerability
xml
denial of service
cve-2014-8901

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.007

Percentile

81.2%

JSON

IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted XML query.

Affected configurations

Nvd
Node
ibmdb2Match9.5
OR
ibmdb2Match9.7
OR
ibmdb2Match9.8
OR
ibmdb2Match10.1
OR
ibmdb2Match10.5
VendorProductVersionCPE
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:*:*:*:*
ibmdb210.1cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*

Related

ibm 4
nvd 1
cvelist 1
prion 1
openvas 1
nessus 4
ibm
ibm
Security Bulletin: IBM® DB2® XML Query Will Cause Excessive CPU Usage (CVE-2014-8901)
2018-06-16 13:08:42
Security Bulletin: Multiple IBM InfoSphere Information Server components are affected by a vulnerability in the XML4C parser (CVE-2014-8901)
2018-06-16 14:07:35
Security Bulletin: WebSphere Message Broker and IBM Integration Bus are affected by denial of service vulnerability (CVE-2014-8901)
2020-03-23 20:41:52
nvd
nvd
CVE-2014-8901
2014-12-18 16:59:18
cvelist
cvelist
CVE-2014-8901
2014-12-18 16:00:00
prion
prion
Design/Logic Flaw
2014-12-18 16:59:00
openvas
openvas
IBM Db2 Multiple Denial of Service Vulnerabilities
2015-01-08 00:00:00
nessus
nessus
IBM DB2 10.5 < Fix Pack 5 Multiple DoS Vulnerabilities
2015-04-16 00:00:00
IBM DB2 10.1 < Fix Pack 5 Multiple Vulnerabilities (Bar Mitzvah)
2016-04-15 00:00:00
IBM DB2 9.7 < Fix Pack 11 Multiple Vulnerabilities (Bar Mitzvah) (FREAK) (TLS POODLE)
2015-07-18 00:00:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.007

Percentile

81.2%

JSON
Related for CVE-2014-8901
ibm4nvd1cvelist1prion1openvas1nessus4