IBM Informix Client SDK vulnerabilities

3 CVEs affecting IBM Informix Client SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3691, published 2009-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3691, published 2009-10-13. High severity, CVSS 9.3. EPSS: 7% chance of exploitation in the next 30 days. Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with…
CVE-2006-5663, published 2006-11-03. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to…
CVE-2006-5664, published 2006-11-03. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a…