VYPR
← All advisories
High severity8.7NVD Advisory· Published Dec 9, 2021· Updated Jun 17, 2026

CVE-2021-29678

CVE-2021-29678

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • IBM/Db26 versions
    cpe:2.3:a:ibm:db2:10.1:*:*:*:*:-:*:*+ 5 more
    • cpe:2.3:a:ibm:db2:10.1:*:*:*:*:-:*:*
    • cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:11.5:*:*:*:*:-:*:*
    • cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
    • (no CPE)range: 9.7, 10.1, 10.5, 11.1, and 11.5
  • NetApp/Oncommand Insight
    cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
  • IBM/DB2 Connect Serverllm-fuzzy
    Range: 9.7, 10.1, 10.5, 11.1, and 11.5
  • IBM/Db2 Recovery Expert for Linux, UNIX and Windowscpe-rescue
    Range: 10.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.