CVE-2008-1997: IBM DB2

High severity, CVSS 9.0. EPSS: 4.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699.

Affected products

• IBM DB2: version 8.0 only; version 9.1 only; version 9.5 only

Published 2008-04-28. Last modified 2026-06-16.