Threats affecting pkg:maven/ibm/db2_mirror_for_i

10 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.5%	CVE-2026-18178IBM Db2 Mirror for i · Path Traversal Medium5.4EPSS 0.5%2026-08-14CVE Database V5CVE-2026-18178 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal. EPSS 0.5%Vulnerability CWE-22	CVE Database V5	2026-08-14
Medium	5.4	EPSS 0.3%	CVE-2026-17227IBM Db2 Mirror for i · SQL Injection Medium5.4EPSS 0.3%2026-08-14CVE Database V5CVE-2026-17227 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2026-08-14
Critical	9.9	EPSS 0.5%	CVE-2026-17186IBM Db2 Mirror for i · OS Command Injection Critical9.9EPSS 0.5%2026-08-14CVE Database V5CVE-2026-17186 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command. EPSS 0.5%Vulnerability CWE-78	CVE Database V5	2026-08-14
Critical	9.8	EPSS 0.8%	CVE-2026-17184IBM Db2 Mirror for i · External Control of File Name or Path Critical9.8EPSS 0.8%2026-08-14CVE Database V5CVE-2026-17184 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path. EPSS 0.8%Vulnerability CWE-73	CVE Database V5	2026-08-14
Critical	9.8	EPSS 0.7%	CVE-2026-17182IBM Db2 Mirror for i · Improper Authentication Critical9.8EPSS 0.7%2026-08-14CVE Database V5CVE-2026-17182 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments. EPSS 0.7%Vulnerability CWE-287	CVE Database V5	2026-08-14
High	7.5	EPSS 0.5%	CVE-2026-17175IBM Db2 Mirror for i · Improper Authentication High7.5EPSS 0.5%2026-08-14CVE Database V5CVE-2026-17175 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement. EPSS 0.5%Vulnerability CWE-287	CVE Database V5	2026-08-14
Medium	6.3	EPSS 0.3%	CVE-2026-17079IBM Db2 Mirror for i · Protection Mechanism Failure Medium6.3EPSS 0.3%2026-08-14CVE Database V5CVE-2026-17079 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter. EPSS 0.3%Vulnerability CWE-693 #ghsa-rrp2-728p-3hxr	CVE Database V5	2026-08-14
High	7.5	EPSS 0.9%	CVE-2026-16915IBM Db2 Mirror for i · Path Traversal High7.5EPSS 0.9%2026-08-14CVE Database V5CVE-2026-16915 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. EPSS 0.9%Vulnerability CWE-22 #ghsa-hv6h-mgvr-7gwq	CVE Database V5	2026-08-14
Medium	5.3	EPSS 0.5%	CVE-2026-16905IBM Db2 Mirror for i · Improper Authentication Medium5.3EPSS 0.5%2026-08-14CVE Database V5CVE-2026-16905 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication. EPSS 0.5%Vulnerability CWE-287 #ghsa-j7xj-v45c-v97f	CVE Database V5	2026-08-14
High	8.8	EPSS 0.5%	CVE-2026-16879IBM Db2 Mirror for i · Improper Authorization High8.8EPSS 0.5%2026-08-14CVE Database V5CVE-2026-16879 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input. EPSS 0.5%Vulnerability CWE-285 #ghsa-jvf7-424w-hvr8	CVE Database V5	2026-08-14

Page 1 of 1