Unscored severity · published May 8, 2015
CVE-2014-0919
IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote…
–
CVSS
1.9%
EPSS
No
On KEV
Description
IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote authenticated users to obtain sensitive information via commands associated with these facilities.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DB
Db2 · Ibm
9.5; 9.5; 9.5; 9.5; 9.5; 9.7; +19 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0919
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0919
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07397
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07547
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07552
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07553
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07554
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21698021
More from Db2
9.8
CVE-2026-10534
IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
9.8
CVE-2026-10543
IBM® Db2® is vulnerable to privilege escalation with a specially crafted query
9.8
CVE-2026-10109
IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling
9.1
CVE-2018-1426
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could…
8.8
CVE-2026-105464
IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management