VulnerabilityModified

CVE-2015-1935

The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors.

HIGH 8.0EPSS 3.52%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.52%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 8.0 HIGHAV:N/AC:L/Au:S/C:P/I:P/A:C
EPSS: 3.52% probability · 89th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-17
Affected: ibm/db2
Source: psirt@us.ibm.com

EPSS trend

EPSS 3.5% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.