Informix JDBC vulnerabilities

2 known vulnerabilities in Informix JDBC from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Informix JDBC: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2023-35895Dec 20, 2023IBM

  IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 259116.

• 9.8 Critical severity

  Informix JDBC: Improper Control of Generation of Code

  CVE-2023-27866Jun 28, 2023IBMEPSS 1.03%

  IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String. IBM X-Force ID: 249511.