Lucene search
HistoryDec 20, 2023 - 3:15 p.m.
CVE-2023-35895
ibm
informix
jdbc
driver
remote code execution
jndi injection
x-force id 259116
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
69.0%
IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 259116.
Affected configurations
Node
ibminformix_jdbcMatch4.10
ORibminformix_jdbcMatch4.50
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | informix_jdbc | 4.10 | cpe:2.3:a:ibm:informix_jdbc:4.10:*:*:*:*:*:*:* |
| ibm | informix_jdbc | 4.50 | cpe:2.3:a:ibm:informix_jdbc:4.50:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-35895 IBM Informix JDBC code execution
2023-12-20 14:18:56
ibm
ibm
cve
cve
CVE-2023-35895
2023-12-20 15:15:08
prion
prion
Remote code execution
2023-12-20 15:15:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
69.0%
Related for NVD:CVE-2023-35895