VULNERABILITY INTELLIGENCE
CVE-2014-8901
CVSS score4 MEDIUM
EPSS probability2.16%
CISA KEVNot currently listed
Published2014-12-18
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Description
IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted XML query.
Primary references
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108