IBM DB2 Purescale Feature 9.8 vulnerabilities

2 CVEs affecting IBM DB2 Purescale Feature 9.8, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-6717, published 2013-12-19.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-6717, published 2013-12-19. Medium severity, CVSS 4.0. EPSS: 2.4% chance of exploitation in the next 30 days. The OLAP query engine in IBM DB2 and DB2 Connect 9.7 through FP9, 9.8 through FP5, 10.1 through FP3, and 10.5 through FP2, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows…
• CVE-2013-5466, published 2013-12-18. Medium severity, CVSS 4.0. EPSS: 2.2% chance of exploitation in the next 30 days. The XSLT library in IBM DB2 and DB2 Connect 9.5 through 10.5, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service via…