Skip to content
OpenAdvisories
High · 8.4 CVE-2023-47145 EUVD-2023-51280GHSA-36h5-gw9w-mwx2

IBM Db2 for Windows privilege escalation

Published Jan 7, 2024 · Updated Jun 11, 2025 · Assigned by ibm

Description

IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402.

Affected products

VendorProductAffectedFixed
IBM Db2 10.5, 11.1, 11.5 —

Advisories 1

References