CVE-2005-4871: IBM DB2

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1) XMLFileFromVarchar or (2) XMLFileFromClob, or read files via (3) XMLVarcharFromFile or (4) XMLClobFromFile.

Affected products

• IBM DB2: version 8.1 only

Published 2005-12-31. Last modified 2026-06-16.