IBM Informix Web Datablade vulnerabilities

3 CVEs affecting IBM Informix Web Datablade, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-0555, published 2002-07-03.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0924, published 2001-11-22. Medium severity, CVSS 5.0. EPSS: 8.1% chance of exploitation in the next 30 days. Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.
• CVE-2002-0554, published 2002-07-03. High severity, CVSS 7.5. EPSS: 6.7% chance of exploitation in the next 30 days. webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.
• CVE-2002-0555, published 2002-07-03. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted…