CVE-2016-0215 | ByteOS Network

Vulnerability Details :

CVE-2016-0215

Assigner-ibm

Assigner Org ID-9a959283-ebb5-44b6-b705-dcc2bbced522

Published At-16 Jan, 2018 | 19:00

Updated At-05 Aug, 2024 | 22:08

IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle compatible database.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:ibm

Assigner Org ID:9a959283-ebb5-44b6-b705-dcc2bbced522

Published At:16 Jan, 2018 | 19:00

Updated At:05 Aug, 2024 | 22:08

▼CVE Numbering Authority (CNA)

IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle compatible database.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21979986	x_refsource_CONFIRM

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21979986

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21979986	x_refsource_CONFIRM x_transferred

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21979986

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:psirt@us.ibm.com

Published At:16 Jan, 2018 | 19:29

Updated At:05 Feb, 2018 | 20:12

IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle compatible database.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P

Type: Primary

Version: 3.0

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 4.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:N/I:N/A:P

CPE Matches

IBM Corporation

>>db2>>9.7

cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise_server:*:*:*

IBM Corporation

>>db2>>9.7

cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup_server:*:*:*

IBM Corporation

>>db2>>9.7

cpe:2.3:a:ibm:db2:9.7:*:*:*:connect_application_server:*:*:*

IBM Corporation

>>db2>>9.7

cpe:2.3:a:ibm:db2:9.7:*:*:*:connect_enterprise:*:*:*

IBM Corporation

>>db2>>9.7

cpe:2.3:a:ibm:db2:9.7:*:*:*:connect_unlimited:system_i:*:*

IBM Corporation

>>db2>>9.7

cpe:2.3:a:ibm:db2:9.7:*:*:*:connect_unlimited:system_z:*:*

IBM Corporation

>>db2>>9.7

cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise_server:*:*:*

IBM Corporation

>>db2>>9.7

cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*

IBM Corporation

>>db2>>9.7

cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup_server:*:*:*

IBM Corporation

>>db2>>10.1

cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise_server:*:*:*

IBM Corporation

>>db2>>10.1

cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup_server:*:*:*

IBM Corporation

>>db2>>10.1

cpe:2.3:a:ibm:db2:10.1:*:*:*:connect_application_server:*:*:*

IBM Corporation

>>db2>>10.1

cpe:2.3:a:ibm:db2:10.1:*:*:*:connect_enterprise:*:*:*

IBM Corporation

>>db2>>10.1

cpe:2.3:a:ibm:db2:10.1:*:*:*:connect_unlimited:system_i:*:*

IBM Corporation

>>db2>>10.1

cpe:2.3:a:ibm:db2:10.1:*:*:*:connect_unlimited:system_z:*:*

IBM Corporation

>>db2>>10.1

cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise_server:*:*:*

IBM Corporation

>>db2>>10.1

cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*

IBM Corporation

>>db2>>10.1

cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup_server:*:*:*

IBM Corporation

>>db2>>10.5

cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise_server:*:*:*

IBM Corporation

>>db2>>10.5

cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup_server:*:*:*

IBM Corporation

>>db2>>10.5

cpe:2.3:a:ibm:db2:10.5:*:*:*:connect_application_server:*:*:*

IBM Corporation

>>db2>>10.5

cpe:2.3:a:ibm:db2:10.5:*:*:*:connect_enterprise:*:*:*

IBM Corporation

>>db2>>10.5

cpe:2.3:a:ibm:db2:10.5:*:*:*:connect_unlimited:system_i:*:*

IBM Corporation

>>db2>>10.5

cpe:2.3:a:ibm:db2:10.5:*:*:*:connect_unlimited:system_z:*:*

IBM Corporation

>>db2>>10.5

cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise_server:*:*:*

IBM Corporation

>>db2>>10.5

cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*

IBM Corporation

>>db2>>10.5

cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup_server:*:*:*

>>hp-ux>>-

cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*

IBM Corporation

>>aix>>-

cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>-

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Microsoft Corporation

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Oracle Corporation

cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*

IBM Corporation

>>db2>>9.8

cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise_server:*:*:*

IBM Corporation

>>aix>>-

cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>-

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21979986	psirt@us.ibm.com	Patch Vendor Advisory

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21979986

Source: psirt@us.ibm.com

Resource:

Patch

Vendor Advisory

Similar CVEs

2934Records found

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-4||MEDIUM

EPSS-2.16% / 80.29%

||

7 Day CHG~0.00%

Published-18 Dec, 2014 | 16:00

Updated-06 May, 2026 | 22:30

IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted XML query.

Vendor-n/a IBM Corporation

Product-db2 n/a

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-6.5||MEDIUM

EPSS-1.37% / 69.09%

||

7 Day CHG~0.00%

Published-01 Sep, 2022 | 19:00

Updated-17 Sep, 2024 | 00:57

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available CPU resources. IBM X-Force ID: 227591.

Vendor-IBM Corporation NetApp, Inc.

Product-cognos_analytics oncommand_insight Cognos Analytics

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-6.5||MEDIUM

EPSS-1.40% / 69.55%

||

7 Day CHG~0.00%

Published-19 Feb, 2020 | 15:15

Updated-16 Sep, 2024 | 16:57

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 could allow an authenticated attacker to cause a denial of service due to incorrect handling of certain commands. IBM X-Force ID: 174341.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-aix db2 windows linux_kernel DB2 for Linux- UNIX and Windows

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-4||MEDIUM

EPSS-1.25% / 66.38%

||

7 Day CHG~0.00%

Published-18 Dec, 2014 | 16:00

Updated-06 May, 2026 | 22:30

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service (disrupted system operations) by uploading a file to a protected area.

Vendor-n/a IBM Corporation

Product-security_access_manager_for_web security_access_manager_for_mobile n/a

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-4||MEDIUM

EPSS-1.39% / 69.38%

||

7 Day CHG~0.00%

Published-18 Dec, 2014 | 16:00

Updated-06 May, 2026 | 22:30

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service (administration UI outage) via unspecified vectors.

Vendor-n/a IBM Corporation

Product-security_access_manager_for_web security_access_manager_for_mobile n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-2.67% / 84.14%

||

7 Day CHG~0.00%

Published-15 Oct, 2014 | 15:15

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

Vendor-n/a MariaDB Foundation Oracle Corporation SUSE

Product-linux_enterprise_desktop mariadb mysql linux_enterprise_workstation_extension linux_enterprise_server linux_enterprise_software_development_kit n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-4.10% / 89.67%

||

7 Day CHG~0.00%

Published-15 Oct, 2014 | 15:15

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.

Vendor-n/a MariaDB Foundation Oracle Corporation SUSE

Product-linux_enterprise_desktop mariadb mysql linux_enterprise_workstation_extension linux_enterprise_server linux_enterprise_software_development_kit n/a

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-4||MEDIUM

EPSS-1.79% / 76.01%

||

7 Day CHG~0.00%

Published-23 Nov, 2014 | 00:00

Updated-06 May, 2026 | 22:30

IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5.1.2.0 FP9, 5.1.2.1 before FP5, 5.2 before 5.2.0.0 FP5, and 5.3 before 5.3.0.0 FP1 on XGS devices allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Vendor-n/a IBM Corporation

Product-security_network_protection_xgs_5000 security_network_protection_xgs_5100 security_network_protection_firmware n/a

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-1.96% / 78.26%

||

7 Day CHG+0.10%

Published-09 Jul, 2021 | 16:02

Updated-03 Aug, 2024 | 17:01

A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

Vendor-n/a Oracle Corporation NetApp, Inc.libxml2 (XMLSoft)Red Hat, Inc.

CWE ID-CWE-776

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-2.67% / 84.14%

||

7 Day CHG~0.00%

Published-15 Oct, 2014 | 22:03

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE.

Vendor-n/a MariaDB Foundation Oracle Corporation SUSE

Product-linux_enterprise_desktop mariadb mysql linux_enterprise_workstation_extension linux_enterprise_server linux_enterprise_software_development_kit n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-2.37% / 82.02%

||

7 Day CHG~0.00%

Published-15 Oct, 2014 | 22:03

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML.

Vendor-n/a MariaDB Foundation Oracle Corporation SUSE

Product-linux_enterprise_desktop mariadb mysql linux_enterprise_workstation_extension linux_enterprise_server linux_enterprise_software_development_kit n/a

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-4||MEDIUM

EPSS-1.24% / 66.03%

||

7 Day CHG~0.00%

Published-23 Nov, 2014 | 00:00

Updated-06 May, 2026 | 22:30

Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service (CPU consumption) via a '\0' character.

Vendor-n/a IBM Corporation

Product-sterling_selling_and_fulfillment_foundation n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-2.91% / 85.54%

||

7 Day CHG~0.00%

Published-17 Jul, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

Vendor-n/a Oracle Corporation

Product-mysql n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-2.91% / 85.54%

||

7 Day CHG~0.00%

Published-17 Jul, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors related to SRREP.

Vendor-n/a Oracle Corporation

Product-mysql n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-2.43% / 82.54%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:53

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-2.98% / 85.86%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 19:08

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Debian GNU/Linux NetApp, Inc.Fedora Project openSUSE Oracle Corporation Canonical Ltd.

Product-ubuntu_linux debian_linux mariadb oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation leap mysql snapcenter MySQL Server

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-1.52% / 71.97%

||

7 Day CHG~0.00%

Published-16 Apr, 2014 | 02:05

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to DML.

Vendor-n/a Oracle Corporation

Product-mysql n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-2.43% / 82.54%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:40

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-2.06% / 79.36%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:53

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-2.00% / 78.66%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:39

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation Fedora Project

Product-oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation mysql snapcenter MySQL Server

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-4||MEDIUM

EPSS-18.27% / 96.91%

||

7 Day CHG~0.00%

Published-08 Jul, 2014 | 22:00

Updated-06 May, 2026 | 22:30

Microsoft Service Bus 1.1 on Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (AMQP messaging outage) via crafted AMQP messages, aka "Service Bus Denial of Service Vulnerability."

Vendor-n/a Microsoft Corporation

Product-service_bus windows_server_2012 n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-3.48% / 87.87%

||

7 Day CHG~0.00%

Published-17 Jul, 2014 | 02:36

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.

Vendor-n/a MariaDB Foundation Oracle Corporation SUSE Debian GNU/Linux

Product-debian_linux linux_enterprise_desktop mariadb mysql linux_enterprise_workstation_extension linux_enterprise_server linux_enterprise_software_development_kit n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-2.84% / 85.16%

||

7 Day CHG~0.00%

Published-16 Apr, 2014 | 02:05

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 allows remote authenticated users to affect availability via unknown vectors related to Webserver Plugin.

Vendor-n/a Oracle Corporation

Product-fusion_middleware n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-3.63% / 88.33%

||

7 Day CHG~0.00%

Published-16 Apr, 2014 | 02:05

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

Vendor-n/a MariaDB Foundation Red Hat, Inc.Oracle Corporation

Product-enterprise_linux_server enterprise_linux_workstation mariadb mysql enterprise_linux_desktop enterprise_linux_server_tus solaris enterprise_linux_server_aus enterprise_linux_eus n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-2.80% / 84.99%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 19:08

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.47 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Debian GNU/Linux NetApp, Inc.Fedora Project openSUSE Oracle Corporation

Product-debian_linux mariadb oncommand_insight fedora active_iq_unified_manager oncommand_workflow_automation leap mysql snapcenter MySQL Server

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-4||MEDIUM

EPSS-1.42% / 70.01%

||

7 Day CHG~0.00%

Published-10 Jun, 2014 | 10:00

Updated-06 May, 2026 | 22:30

IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service (storage overlay) by using a 3270 emulator to send an invalid 3270 data stream.

Vendor-n/a IBM Corporation

Product-cics_transaction_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-1.52% / 71.97%

||

7 Day CHG~0.00%

Published-16 Apr, 2014 | 02:05

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle MySQL Server 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

Vendor-n/a Oracle Corporation

Product-mysql n/a

Matching Score-8

Assigner-HP Inc.

Matching Score-8

Assigner-HP Inc.

CVSS Score-4||MEDIUM

EPSS-1.23% / 65.84%

||

7 Day CHG~0.00%

Published-05 Apr, 2014 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors.

Vendor-n/a HP Inc.

Product-icewall_identity_manager icewall_sso_password_reset_option n/a

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-6.5||MEDIUM

EPSS-1.69% / 74.65%

||

7 Day CHG~0.00%

Published-29 Jun, 2017 | 13:00

Updated-13 May, 2026 | 00:24

IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system and cause the server to crash. IBM X-Force ID: 125569.

Vendor-IBM Corporation

Product-informix_dynamic_server Informix Servers

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-6.5||MEDIUM

EPSS-2.25% / 81.08%

||

7 Day CHG~0.00%

Published-25 Sep, 2017 | 16:00

Updated-13 May, 2026 | 00:24

IBM WebSphere MQ 8.0 could allow an authenticated user to cause a premature termination of a client application thread which could potentially cause denial of service. IBM X-Force ID: 123914.

Vendor-IBM Corporation

Product-websphere_mq MQ

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-6.5||MEDIUM

EPSS-2.59% / 83.68%

||

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 02:02

A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found.

Vendor-HP Inc.Hewlett Packard Enterprise (HPE)

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-1.65% / 74.12%

||

7 Day CHG~0.00%

Published-20 Oct, 2021 | 10:51

Updated-25 Sep, 2024 | 19:23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Oracle Corporation

Product-oncommand_insight mysql snapcenter MySQL Server

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-3.72% / 88.62%

||

7 Day CHG~0.00%

Published-19 Oct, 2017 | 17:00

Updated-13 May, 2026 | 00:24

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation

Product-mysql MySQL Server

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-3.24% / 86.96%

||

7 Day CHG~0.00%

Published-19 Oct, 2017 | 17:00

Updated-13 May, 2026 | 00:24

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Oracle Corporation Red Hat, Inc.Debian GNU/Linux NetApp, Inc.

Product-debian_linux mariadb enterprise_linux_server_tus enterprise_linux_desktop oncommand_performance_manager oncommand_balance enterprise_linux_server_aus oncommand_insight oncommand_unified_manager openstack active_iq_unified_manager oncommand_workflow_automation enterprise_linux_server enterprise_linux_workstation mysql enterprise_linux_eus snapcenter MySQL Server

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.7||HIGH

EPSS-1.19% / 64.58%

||

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-13 May, 2026 | 00:24

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Reporting). Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. While the vulnerability is in Oracle Hospitality Reporting and Analytics, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Reporting and Analytics. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

Vendor-Oracle Corporation

Product-hospitality_reporting_and_analytics Hospitality Reporting and Analytics

CWE ID-CWE-269

Improper Privilege Management

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4||MEDIUM

EPSS-1.28% / 67.02%

||

7 Day CHG~0.00%

Published-15 Jan, 2014 | 02:50

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect availability via unknown vectors related to Data, Domain & Function Security.

Vendor-n/a Oracle Corporation

Product-supply_chain_products_suite n/a

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-6.5||MEDIUM

EPSS-2.22% / 80.83%

||

7 Day CHG~0.00%

Published-15 Apr, 2022 | 19:04

Updated-09 Dec, 2025 | 21:23

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Vendor-Microsoft Corporation

Product-windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 Windows Server 2012 R2 (Server Core installation)Windows Server 2019 (Server Core installation)Windows Server 2022 Windows Server 2016 (Server Core installation)Windows Server 2019 Windows Server 2012 Windows Server version 20H2 Windows Server 2016 Windows Server 2012 (Server Core installation)Windows Server 2012 R2

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-2.39% / 82.22%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-5.3||MEDIUM

EPSS-1.56% / 72.64%

||

7 Day CHG-0.20%

Published-28 Jan, 2020 | 18:30

Updated-17 Sep, 2024 | 04:19

IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by converting an invalid message. IBM X-Force ID: 168639.

Vendor-Oracle Corporation IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-solaris linux_kernel mq_appliance windows mq MQ

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-6.71% / 93.20%

||

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.

Vendor-n/a Oracle Corporation MariaDB Foundation

Product-mariadb mysql n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.9||MEDIUM

EPSS-3.14% / 86.53%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation

Product-ubuntu_linux snapcenter active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-5.3||MEDIUM

EPSS-1.05% / 60.85%

||

7 Day CHG~0.00%

Published-16 Dec, 2019 | 15:45

Updated-16 Sep, 2024 | 18:44

IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by channels processing poorly formatted messages. IBM X-Force ID: 166357.

Vendor-IBM Corporation

Product-mq_appliance MQ

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-2.65% / 84.06%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-5.3||MEDIUM

EPSS-1.36% / 68.85%

||

7 Day CHG~0.00%

Published-17 Jul, 2019 | 14:05

Updated-16 Sep, 2024 | 18:34

IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow a user to delete authorized resources. IBM X-Force ID: 159033.

Vendor-IBM Corporation

Product-jazz_for_service_management Jazz for Service Management

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-2.69% / 84.31%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-2.65% / 84.06%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-4.3||MEDIUM

EPSS-2.35% / 81.92%

||

7 Day CHG-0.26%

Published-05 Aug, 2019 | 13:40

Updated-17 Sep, 2024 | 03:43

IBM WebSphere MQ V7.1, 7.5, IBM MQ V8, IBM MQ V9.0LTS, IBM MQ V9.1 LTS, and IBM MQ V9.1 CD are vulnerable to a denial of service attack caused by specially crafted messages. IBM X-Force ID: 160013.

Vendor-IBM Corporation

Product-websphere_mq mq MQ

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-3.73% / 88.64%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:27

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-MariaDB Foundation Fedora Project openSUSE Oracle Corporation Canonical Ltd.

Product-ubuntu_linux mariadb fedora mysql leap MySQL Server

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-2.65% / 84.06%

||

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vendor-NetApp, Inc.Canonical Ltd.Oracle Corporation Fedora Project

Product-ubuntu_linux snapcenter fedora active_iq_unified_manager oncommand_workflow_automation mysql oncommand_insight MySQL Server

Matching Score-8

Assigner-IBM Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-6.5||MEDIUM

EPSS-1.44% / 70.35%

||

7 Day CHG-0.19%

Published-16 Mar, 2020 | 15:25

Updated-17 Sep, 2024 | 04:18

IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and require a restart due to an error processing error messages. IBM X-Force ID: 170967.

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Product-solaris linux_kernel mq_appliance websphere_mq hp-ux windows mq aix MQ