CVE-2012-2196

EUVD-2012-2190
IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the (1) GET_WRAP_CFG_C or (2) GET_WRAP_CFG_C2 stored procedure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
Affected Products (NVD)
VendorProductVersion
ibmdb2
9.1
ibmdb2
9.1.0.1
ibmdb2
9.1.0.2
ibmdb2
9.1.0.2:a
ibmdb2
9.1.0.3
ibmdb2
9.1.0.3:a
ibmdb2
9.1.0.4
ibmdb2
9.1.0.4:a
ibmdb2
9.1.0.5
ibmdb2
9.1.0.6
ibmdb2
9.1.0.6:a
ibmdb2
9.1.0.7
ibmdb2
9.1.0.7:a
ibmdb2
9.1.0.8
ibmdb2
9.1.0.9
ibmdb2
9.1.0.10
ibmdb2
9.1.0.11
ibmdb2
9.5
ibmdb2
9.5.0.1
ibmdb2
9.5.0.2
ibmdb2
9.5.0.2:a
ibmdb2
9.5.0.3
ibmdb2
9.5.0.3:a
ibmdb2
9.5.0.3:b
ibmdb2
9.5.0.4
ibmdb2
9.5.0.4:a
ibmdb2
9.5.0.5
ibmdb2
9.5.0.6:a
ibmdb2
9.5.0.7
ibmdb2
9.5.0.8
ibmdb2
9.5.0.9
ibmdb2
9.7
ibmdb2
9.7.0.1
ibmdb2
9.7.0.2
ibmdb2
9.7.0.3
ibmdb2
9.7.0.4
ibmdb2
9.7.0.5
ibmdb2
9.7.0.6
ibmdb2
9.8
ibmdb2
9.8.0.3
ibmdb2
9.8.0.4
ibmdb2
9.8.0.5
ibmdb2
10.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
db2exc
hardy
ignored
lucid
ignored
natty
dne
oneiric
dne
precise
ignored
quantal
dne
raring
dne
saucy
dne
trusty
dne
utopic
dne
vivid
dne
wily
dne
xenial
dne
yakkety
dne
zesty
dne