IBM DB2 Content Manager vulnerabilities

5 CVEs affecting IBM DB2 Content Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-1041, published 2010-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-1041, published 2010-03-23. High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for…
CVE-2008-1681, published 2008-04-04. High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege.
CVE-2009-1231, published 2009-04-02. High severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the eClient in IBM DB2 Content Manager 8.4.1 before 8.4.1.1 has unknown impact and attack vectors.
CVE-2005-3569, published 2005-11-16. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. INSO service in IBM DB2 Content Manager before 8.2 Fix Pack 10 on AIX allows attackers to cause a denial of service (application crash) via unknown attack vectors involving LZH files.
CVE-2005-3568, published 2005-11-16. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. db2fmp process in IBM DB2 Content Manager before 8.2 Fix Pack 10 allows local users to cause a denial of service (CPU consumption) by importing a corrupted Microsoft Excel file, aka "CORRUPTED EXEL…