← Back

Informix Dynamic Server

informix_dynamic_server

Vendor: Ibm • 53 CVEs

CVEs (53)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-13476
1Ibm
1Informix Dynamic Server
Aug 18, 2026
Aug 12, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.
CVE-2026-13367
1Ibm
1Informix Dynamic Server
Aug 18, 2026
Aug 12, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.
CVE-2026-13361
1Ibm
1Informix Dynamic Server
Aug 18, 2026
Aug 12, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.
CVE-2024-45675
1Ibm
1Informix Dynamic Server
Jun 17, 2026
Dec 2, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.
CVE-2024-49343
1Ibm
1Informix Dynamic Server
Jun 17, 2026
Jul 28, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security contex...Show more
IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.Show less
CVE-2024-49342
1Ibm
1Informix Dynamic Server
Jun 17, 2026
Jul 28, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Informix Dynamic Server 12.10 and 14.10 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
CVE-2025-1991
1Ibm
1Informix Dynamic Server
Jun 17, 2026
Jun 28, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets.
CVE-2023-28527
1Ibm
2Informix Dynamic Server
Informix Dynamic Server On Cloud Pak For Data
Jun 17, 2026
Dec 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251206.
CVE-2023-28526
1Ibm
2Informix Dynamic Server
Informix Dynamic Server On Cloud Pak For Data
Jun 17, 2026
Dec 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251204.
CVE-2023-28523
1Ibm
2Informix Dynamic Server
Informix Dynamic Server On Cloud Pak For Data
Jun 17, 2026
Dec 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 250753.
CVE-2021-20515
1Ibm
1Informix Dynamic Server
Jun 17, 2026
Apr 30, 2021
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could overflow a buffer and execute arbitrary code on the system or cause a de...Show more
IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could overflow a buffer and execute arbitrary code on the system or cause a denial of service condition. IBM X-Force ID: 198366.Show less
CVE-2020-4799
1Ibm
1Informix Dynamic Server
Jun 17, 2026
Oct 8, 2020
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID: 189460.
CVE-2019-4253
1Ibm
1Informix Dynamic Server
Jun 17, 2026
Aug 20, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain root access privileges. IBM X-Force ID: 159941.
CVE-2018-1796
1Ibm
1Informix Dynamic Server
Nov 21, 2024
Aug 20, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-Force ID: 149426.
CVE-2018-1636
1Ibm
1Informix Dynamic Server
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force I...Show more
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144441.Show less
CVE-2018-1635
1Ibm
1Informix Dynamic Server
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force I...Show more
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144439.Show less
CVE-2018-1634
1Ibm
1Informix Dynamic Server
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID:...Show more
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID: 144437.Show less
CVE-2018-1633
1Ibm
1Informix Dynamic Server
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onsrvapd. IBM X-Force ID: 144434.
CVE-2018-1632
1Ibm
1Informix Dynamic Server
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in .infxdirs. IBM X-Force ID: 144432.
CVE-2018-1631
1Ibm
1Informix Dynamic Server
Nov 21, 2024
Aug 20, 2019
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash. IBM X-Force ID: 1...Show more
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash. IBM X-Force ID: 144431.Show less