IBM Informix I-Connect vulnerabilities

2 CVEs affecting IBM Informix I-Connect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-5664, published 2006-11-03.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-5663, published 2006-11-03. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to…
• CVE-2006-5664, published 2006-11-03. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a…