CVE-2009-4150: IBM DB2

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.

Affected products

• IBM DB2: version 9.1 only; version 9.5 only; version 9.7 only
• IBM DB2 Universal Database: version 8 only

Published 2009-12-02. Last modified 2026-06-16.