| Package | Affected versions | Patched versions |
|---|---|---|
| db2 | = 9.5= 9.7= 9.8 |
The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free