Vulnerability Database

315,363

Total vulnerabilities in the database

CVE-2014-8910

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a crafted XML/XSLT function in a SELECT statement.

  • Published: Jul 20, 2015
  • Updated: Nov 9, 2025
  • CVE: CVE-2014-8910
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
ibm / db2 10.1 10.1.x
ibm / db2 10.5 10.5.x
ibm / db2 9.8 9.8.x
ibm / db2 9.7 9.7.x