VULNERABILITY INTELLIGENCE

CVE-2015-0157

CVSS score6.8 MEDIUM
EPSS probability2.52%
CISA KEVNot currently listed
Published2015-07-20
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:C

Description

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by leveraging an unspecified scalar function in a SQL statement.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references