← back
CVE-2023-27866

IBM Informix JDBC code execution

CVSS 6.3 MEDIUMEPSS 0.9%CWE-94
IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String. IBM X-Force ID: 249511.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
IBM · Informix JDBC

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →