CVE-2023-47747

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 22, 2024

Updated: Mar 7, 2024

CWE ID 20

Summary

CVE-2023-47747 is a vulnerability affecting IBM DB2 for Linux, UNIX, and Windows versions 10.1, 10.5, and 11.1. An authenticated user holding CONNECT privileges can exploit this issue by executing a carefully crafted query. The result is a denial of service, as confirmed by IBM X-Force with ID 272646. IBM urges users to apply the available patches to mitigate this risk. This vulnerability could potentially impact operational efficiency and data accessibility.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

IBM DB2

Affected Vendors

IBM Corporation

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/tVhqSC
https://www.cve.org/CVERecord?id=CVE-2023-47747
https://nvd.nist.gov/vuln/detail/CVE-2023-47747

Back to Vulnerability Database