cve.bz

CVE-2023-35895

9.8 criticalEPSS 0.9%

Critical (9.8) in ibm informix jdbc. EPSS 0.9% chance of exploitation in the next 30 days.

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 259116.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWEs
CWE-74, CWE-78
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON