Lucene search
HistoryDec 01, 2022 - 6:15 p.m.
CVE-2022-41297
ibm
db2u
cross-site request forgery
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
20.1%
IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237212.
Affected configurations
Node
ibmdb2_on_cloud_pak_for_dataRange3.5–4.6
ORibmdb2_warehouse_on_cloud_pak_for_dataRange3.5–4.6
ORibmdb2uMatch3.5
ORibmdb2uMatch4.0
ORibmdb2uMatch4.5
Related
prion
prion
Cross site request forgery (csrf)
2022-12-01 18:15:00
cnvd
cnvd
IBM DB2 Cross-Site Request Forgery Vulnerability
2022-12-05 00:00:00
cvelist
cvelist
CVE-2022-41297 IBM Db2U cross-site request forgery
2022-12-01 17:30:14
cve
cve
CVE-2022-41297
2022-12-01 18:15:10
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
20.1%
Related for NVD:CVE-2022-41297