ID
Product
Informix Dynamic Server
53
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 11Medium 13Low 0
Watch
Add Informix Dynamic Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13361 | 8.8 | Aug 12 | IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution Affected: 14.10; 12.10.x; 15.0 |
| CVE-2026-13367 | 7.8 | Aug 12 | IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility Affected: 14.10; 15.0 |
| CVE-2024-45675 | 7.8 | Dec 2 | IBM Informix Dynamic Server Authentication Bypass Affected: 14.10 |
| CVE-2023-28523 | 7.8 | Dec 9 | IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary… Affected: 12.10; 14.10 |
| CVE-2020-4799 | 7.8 | Oct 8 | IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability Affected: 14.10 |
| CVE-2019-4253 | 7.8 | Aug 20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain root access privileges Affected: 12.10; 12.10; 12.10; 12.10; 12.10; 12.10; +6 more |
| CVE-2018-1796 | 7.8 | Aug 20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges Affected: 12.10; 12.10; 12.10; 12.10; 12.10; 12.10; +6 more |
| CVE-2016-0226 | 7.8 | Mar 28 | The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files,… Affected: 11.70.xcn |
| CVE-2024-49342 | 7.5 | Jul 28 | IBM Informix Dynamic Server information disclosure Affected: 12.10; 14.10 |
| CVE-2025-1991 | 7.5 | Jun 28 | IBM Informix Dynamic Server denial of service Affected: 12.10; 14.10; 15.0 |
| CVE-2026-13476 | 7.3 | Aug 12 | IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution Affected: 14.10; 15.0; 12.10 |
| CVE-2021-20515 | 6.7 | Apr 30 | IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking Affected: 14.10 |
| CVE-2018-1636 | 6.7 | Aug 20 | Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as… Affected: 12.10; 12.10; 12.10; 12.10; 12.10; 12.10; +6 more |
| CVE-2018-1635 | 6.7 | Aug 20 | Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as… Affected: 12.10; 12.10; 12.10; 12.10; 12.10; 12.10; +6 more |
| CVE-2018-1634 | 6.7 | Aug 20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link… Affected: 12.10; 12.10; 12.10; 12.10; 12.10; 12.10; +6 more |
| CVE-2018-1633 | 6.7 | Aug 20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link… Affected: 12.10; 12.10; 12.10; 12.10; 12.10; 12.10; +6 more |
| CVE-2018-1632 | 6.7 | Aug 20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link… Affected: 12.10; 12.10; 12.10; 12.10; 12.10; 12.10; +6 more |
| CVE-2018-1631 | 6.7 | Aug 20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link… Affected: 12.1 |
| CVE-2018-1630 | 6.7 | Aug 20 | IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link… Affected: 12.1 |
| CVE-2017-1508 | 6.7 | Sep 13 | IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges Affected: 12.10 |
| CVE-2017-1310 | 6.5 | Jun 29 | IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server Affected: 12.10 |
| CVE-2023-28527 | 5.5 | Dec 9 | IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation… Affected: 12.10; 14.10 |
| CVE-2023-28526 | 5.5 | Dec 9 | IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a… Affected: 12.10; 14.10 |
| CVE-2024-49343 | 5.4 | Jul 28 | IBM Informix Dynamic Server HTML injection Affected: 12.10; 14.10 |
| CVE-2012-4857 | – | Dec 8 | Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement Affected: 11.50; 11.50.xc1; 11.50.xc2; 11.50.xc3; 11.50.xc3w1; 11.50.xc4; +24 more |
| CVE-2012-3334 | – | Sep 25 | Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated users to execute arbitrary code… Affected: 11.50; 11.50.xc1; 11.50.xc2; 11.50.xc3; 11.50.xc3w1; 11.50.xc4; +26 more |
| CVE-2011-1033 | – | Feb 14 | Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED… Affected: 11.50 |
| CVE-2010-4070 | – | Oct 25 | Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before… Affected: 7.31; 9.40.tc5; 9.40.uc1; 9.40.uc2; 9.40.uc3; 9.40.uc5; +19 more |
| CVE-2010-4069 | – | Oct 25 | Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3… Affected: 7.31; 9.40.tc5; 9.40.uc1; 9.40.uc2; 9.40.uc3; 9.40.uc5; +23 more |
| CVE-2010-4053 | – | Oct 23 | Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote… Affected: 11.10; 11.50 |
| CVE-2009-2754 | – | Mar 5 | Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix… Affected: 10.0; 10.0.tc1; 10.0.xc1; 10.0.xc2e; 10.0.xc3; 10.0.xc3e; +22 more |
| CVE-2009-2753 | – | Mar 5 | Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix… Affected: 10.0; 10.0.tc1; 10.0.xc1; 10.0.xc2e; 10.0.xc3; 10.0.xc3e; +22 more |
| CVE-2009-3470 | – | Sep 29 | IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service (memory… Affected: 10.0; 10.00.xc1; 10.00.xc2; 10.00.xc3; 10.00.xc4; 10.00.xc5; +13 more |
| CVE-2008-0727 | – | Mar 18 | Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2)… Affected: 7.3; 7.31.xd8; 7.31.xd9; 9.3; 9.4; 9.40.tc5; +11 more |
| CVE-2008-0949 | – | Mar 18 | Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet Affected: 7.3; 7.31.xd8; 7.31.xd9; 9.3; 9.4; 9.40.tc5; +11 more |
| CVE-2008-0768 | – | Feb 13 | Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and… Affected: 10.0 through 10.00.xc8; 11.10 through 11.10.xc2 |
| CVE-2008-0369 | – | Jan 19 | Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG… Affected: 10.00 |
| CVE-2008-0368 | – | Jan 19 | onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument Affected: 10.0 |
| CVE-2007-5957 | – | Nov 14 | Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service (application crash) via… Affected: 10.00.tc3tl; 11.10.tb4tl |
| CVE-2007-5956 | – | Nov 14 | Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through… Affected: through 10.00 |
| CVE-2006-5663 | – | Nov 3 | IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which… Affected: 10.00 |
| CVE-2006-5664 | – | Nov 3 | The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise… Affected: 10.00 |
| CVE-2006-5163 | – | Oct 5 | IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data… Affected: 10.uc_rc1 |
| CVE-2006-3855 | – | Aug 8 | The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library,… Affected: 9.4; 9.40.tc5; 9.40.uc1; 9.40.uc2; 9.40.uc3; 9.40.uc5; +2 more |
| CVE-2006-3862 | – | Aug 8 | Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG… Affected: 9.40.tc5; 9.40.uc5; 9.40.xc5; 10.0.tc1; 10.0.xc1 |
| CVE-2006-3861 | – | Aug 8 | IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create… Affected: 7.31; 9.4; 9.40.tc5; 9.40.uc1; 9.40.uc2; 9.40.uc3; +4 more |
| CVE-2006-3858 | – | Aug 8 | IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by… Affected: 9.4; 9.40.tc5; 9.40.uc1; 9.40.uc2; 9.40.uc3; 9.40.uc5; +5 more |
| CVE-2006-3856 | – | Aug 8 | IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors Affected: 9.4; 9.40.tc5; 9.40.uc1; 9.40.uc2; 9.40.uc3; 9.40.uc5; +3 more |
| CVE-2006-3853 | – | Aug 8 | Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a… Affected: 9.4; 9.40.tc5; 9.40.uc1; 9.40.uc2; 9.40.uc3; 9.40.uc5; +3 more |
| CVE-2004-2319 | – | Dec 31 | IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink… Affected: 9.40.uc1; 9.40.uc2 |