Informix Dynamic Server vulnerabilities
4 known vulnerabilities in Informix Dynamic Server from IBM. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Informix Dynamic Server: Improper Neutralization of Special Elements used in an OS Command
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.
- 7.5 High severity
Informix Dynamic Server: Improper Restriction of Excessive Authentication Attempts
IBM Informix Dynamic Server 12.10 and 14.10 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
- 7.5 High severity
Informix Dynamic Server: Integer Underflow (Wrap or Wraparound)
IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets.
- 7.8 High severity
Informix Dynamic Server: Out-of-bounds Write
IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 250753.