CVE-2012-3324

CRITICAL 9.0CVE-2012-3324 · Published 25/09/2012 · updated 16/06/2026

In short

CVE-2012-3324 is a CRITICAL (CVSS 9.0) vulnerability affecting db2 connect (ibm).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
db2 connect ibm	`= 10.1`	No fix yet

Description

Directory traversal vulnerability in the UTL_FILE module in IBM DB2 and DB2 Connect 10.1 before FP1 on Windows allows remote authenticated users to modify, delete, or read arbitrary files via a pathname in the file field.

References

www-01.ibm.com/support/docview.wss · Vendor Advisory
www-01.ibm.com/support/docview.wss · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/77924

More vulnerabilities in db2 connect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free