Threats tagged 'ghsa-rq84-fvp5-f5x5'

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 contain a critical vulnerability that allows remote attackers to execute arbitrary CL commands. This is due to improper neutralization of special elements in commands, leading to command injection risks. The vulnerability has a very high CVSS score of 9.9, indicating critical severity with network attack vector, no privileges or user interaction required, and impacts confidentiality, integrity, and availability.