CVE-2009-3472

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-29 · updated 2026-06-16
Weakness: CWE-264

Description

IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors.

Affected products

IBM Db2 for Linux, UNIX and Windows: 8.0-fp1, 8.0-fp10, 8.0-fp11, 8.0-fp12, 8.0-fp13, 8.0-fp14 (+21)

References

http://osvdb.org/58478
http://secunia.com/advisories/36890
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50074
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50078
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50079
http://www-01.ibm.com/support/docview.wss?uid=swg21386689
http://www-01.ibm.com/support/docview.wss?uid=swg21403619
http://www.securityfocus.com/bid/36540
http://osvdb.org/58478
http://secunia.com/advisories/36890
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50074
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50078

Get alerted when CVE-2009-3472 or the next vulnerability affects your stack