CVE-2022-22390

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
IBM	DB2 for Linux, UNIX and Windows	10.5; 10.1; 9.7; 11.1; 11.5

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/221973VDB Entry, Vendor Advisory
https://security.netapp.com/advisory/ntap-20220729-0007/Third Party Advisory
https://www.ibm.com/support/pages/node/6597993Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/221973VDB Entry, Vendor Advisory
https://security.netapp.com/advisory/ntap-20220729-0007/Third Party Advisory
https://www.ibm.com/support/pages/node/6597993Vendor Advisory

Timeline

Published: Jun 24, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-223914.3IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating system CVE-2022-223927.8IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim CVE-2022-223936.5IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticat CVE-2022-223948.8The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of CVE-2022-223967.5Credentials are printed in clear text in the IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.3 virgo log file in certain cases. Credential CVE-2022-223996.5IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This CVE-2022-22408.8The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a maliciou CVE-2022-224017.5IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information. IBM X-Force ID: CVE-2022-224025.4IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web CVE-2022-224046.5IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may CVE-2022-224055.9IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict CVE-2022-224095.3IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application, caused by an insecure confi