IBM Informix Dynamic Server On Cloud Pak For Data vulnerabilities

3 CVEs affecting IBM Informix Dynamic Server On Cloud Pak For Data, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28527, published 2023-12-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-28523, published 2023-12-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force…
CVE-2023-28527, published 2023-12-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force…
CVE-2023-28526, published 2023-12-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM…