IBM Informix Extended Parallel Server vulnerabilities

3 CVEs affecting IBM Informix Extended Parallel Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-2490, published 2004-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-2131, published 2004-01-27. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment…
CVE-2004-2319, published 2004-12-31. Low severity, CVSS 3.6. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in…
CVE-2004-2490, published 2004-12-31. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable.