CVE-2014-8910

MEDIUM 4.0CVE-2014-8910 · Published 20/07/2015 · updated 17/06/2026

In short

CVE-2014-8910 is a MEDIUM (CVSS 4.0) vulnerability affecting db2 (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 79.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
db2 ibm	`= 10.1= 10.5= 9.7= 9.8`	No fix yet

Description

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a crafted XML/XSLT function in a SELECT statement.

References

www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Vendor Advisory
www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Patch
securityfocus.com/bid/75949
securitytracker.com/id/1032883

More vulnerabilities in db2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

db2

ibm

= 10.1= 10.5= 9.7= 9.8

No fix yet

More vulnerabilities in db2

See all →