CVE-2023-27859: IBM DB2

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases. A user could exploit this by installing a malicious jar file that overwrites the existing like named jar file in another database. IBM X-Force ID: 249205.

Affected products

• IBM DB2: from 10.5.0.0, up to and including 10.5.0.11; from 11.1.0.0, up to and including 11.1.4.7; from 11.5, up to and including 11.5.9

Published 2024-01-22. Last modified 2026-06-17.