VULNERABILITY INTELLIGENCE

CVE-2022-43928

CVSS score6.5 MEDIUM

EPSS probability0.48%

CISA KEVNot currently listed

Published2023-04-07

Last modified2026-06-17

Description

The IBM Toolbox for Java (Db2 Mirror for i 7.4 and 7.5) could allow a user to obtain sensitive information, caused by utilizing a Java string for processing. Since Java strings are immutable, their contents exist in memory until garbage collected. This means sensitive data could be visible in memor…