VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jun 28, 2023· Updated Jun 17, 2026

CVE-2023-27866

CVE-2023-27866

Description

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String. IBM X-Force ID: 249511.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Informix Jdbc Driver3 versions
    cpe:2.3:a:ibm:informix_jdbc_driver:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:informix_jdbc_driver:*:*:*:*:*:*:*:*range: >=4.50.0,<4.50.10
    • cpe:2.3:a:ibm:informix_jdbc_driver:4.10:*:*:*:*:*:*:*
    • (no CPE)range: 4.10, 4.50
  • IBM/Informixcpe-rescue
    Range: 4.10, 4.50

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.