IBM u2 Universe vulnerabilities

4 CVEs affecting IBM u2 Universe, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0580, published 2003-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-1450, published 2002-07-31. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a query with an invalid link between tables, possibly via a buffer overflow.
CVE-2003-0579, published 2003-08-18. Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days. uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by…
CVE-2003-0580, published 2003-08-18. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.
CVE-2003-0578, published 2003-08-18. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.