CVE-2009-4331: IBM DB2

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors.

Affected products

• IBM DB2: version 9.5 only; version 9.7 only

Published 2009-12-16. Last modified 2026-06-16.