CVE-2023-27866: IBM Informix Jdbc Driver

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String. IBM X-Force ID: 249511.

Affected products

• IBM Informix Jdbc Driver: from 4.50.0, before 4.50.10 (fixed in 4.50.10); version 4.10 only

Published 2023-06-28. Last modified 2026-06-17.