CVE-2022-41297

Published: Dec 1, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237212.

Affected (5)

Products: Ibm: Db2 On Cloud Pak For Data, Db2 Warehouse On Cloud Pak For Data, Db2u

Ibm

3 products

Db2 On Cloud Pak For Data

Db2 Warehouse On Cloud Pak For Data

Db2u

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Db2 On Cloud Pak For Data	From 3.5 to 4.6
Ibm Db2 Warehouse On Cloud Pak For Data	From 3.5 to 4.6
Ibm Db2u	Version 3.5
Ibm Db2u	Version 4.0
Ibm Db2u	Version 4.5