Lucene search

IbmCVE-2014-8910

HistoryJul 20, 2015 - 1:59 a.m.

CVE-2014-8910

2015-07-2001:59:00

CWE-74

ibm

web.nvd.nist.gov

ibm

db2

security

vulnerability

cve-2014-8910

linux

unix

windows

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.003

Percentile

66.2%

JSON

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a crafted XML/XSLT function in a SELECT statement.

Affected configurations

Nvd

Node

ibmdb2Match9.7advanced_enterprise

ibmdb2Match9.7advanced_workgroup

ibmdb2Match9.7enterprise

ibmdb2Match9.7express

ibmdb2Match9.7workgroup

ibmdb2Match9.8advanced_enterprise

ibmdb2Match9.8advanced_workgroup

ibmdb2Match9.8enterprise

ibmdb2Match9.8express

ibmdb2Match9.8workgroup

ibmdb2Match10.1advanced_enterprise

ibmdb2Match10.1advanced_workgroup

ibmdb2Match10.1enterprise

ibmdb2Match10.1express

ibmdb2Match10.1workgroup

ibmdb2Match10.5advanced_enterprise

ibmdb2Match10.5advanced_workgroup

ibmdb2Match10.5enterprise

ibmdb2Match10.5express

ibmdb2Match10.5workgroup

VendorProductVersionCPE
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_enterprise:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_workgroup:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:express:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:workgroup:*:*:*

Vendor	Product	Version	CPE
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::advanced_enterprise:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::advanced_workgroup:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::enterprise:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::express:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::workgroup:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::advanced_enterprise:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::advanced_workgroup:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::enterprise:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::express:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::workgroup:::