CVE-2013-5466

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-18 · updated 2026-06-16

Description

The XSLT library in IBM DB2 and DB2 Connect 9.5 through 10.5, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service via unspecified vectors.

Affected products

IBM Db2 for Linux, UNIX and Windows: 9.5, 9.7, 9.8, 10.1, 10.5
IBM Db2 Connect: 9.5, 9.7, 9.8, 10.1, 10.5
IBM Db2 Purescale Feature 9.8: all versions

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IC97402
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97470
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97471
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97472
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97763
http://www-01.ibm.com/support/docview.wss?uid=swg21660046
http://www.securityfocus.com/bid/64334
https://exchange.xforce.ibmcloud.com/vulnerabilities/88365
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97402
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97470
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97471
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97472

Get alerted when CVE-2013-5466 or the next vulnerability affects your stack