CVE-2023-33854

5.3 mediumEPSS 0.3%

Medium (5.3) in ibm. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and manipulate input data using man in the middle techniques.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-294
Published: 2026-06-22
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2
ibm:db2_warehouse

References

https://www.ibm.com/support/pages/node/7277112

Check your stack JSON