VULNERABILITY INTELLIGENCE

CVE-2008-1997

CVSS score9 HIGH
EPSS probability4.43%
CISA KEVNot currently listed
Published2008-04-28
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references