CVE-2023-38003: IBM DB2

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214.

Affected products

• IBM DB2: version 10.5 only; version 11.1 only; version 11.5 only

Published 2023-12-04. Last modified 2026-06-17.