CVE-2012-2196

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-07-25 · updated 2026-06-16
Weakness: CWE-200

Description

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the (1) GET_WRAP_CFG_C or (2) GET_WRAP_CFG_C2 stored procedure.

Affected products

IBM Db2 for Linux, UNIX and Windows: 9.1, 9.1.0.1, 9.1.0.2, 9.1.0.2-a, 9.1.0.3, 9.1.0.3-a (+37)

References

http://secunia.com/advisories/49919
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84614
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84712
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84748
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84750
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84751
http://www-01.ibm.com/support/docview.wss?uid=swg21600837
http://www.securityfocus.com/bid/54487
http://secunia.com/advisories/49919
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84614
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84712
http://www-01.ibm.com/support/docview.wss?uid=swg1IC84748

Get alerted when CVE-2012-2196 or the next vulnerability affects your stack