Medium severity5.3NVD Advisory· Published Jun 22, 2026· Updated Jun 30, 2026

CVE-2023-33854

Description

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and manipulate input data using man in the middle techniques.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Db2
cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*
Range: >=4.8,<5.4
IBM/Db2 Warehouse
cpe:2.3:a:ibm:db2_warehouse:*:*:*:*:*:*:*:*
Range: >=4.8,<5.4
IBM/Db2 On Cloud Pak For Datallm-fuzzy
Range: 4.8, 5.0, 5.1, 5.2, 5.3
IBM/Db2 Warehouse On Cloud Pak For Datallm-fuzzy
Range: 4.8, 5.0, 5.1, 5.2, 5.3

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7277112nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000