CVE-2026-17047: IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery []
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation.
Other sources
IBM Db2 Mirror for i could allow a remote attacker to obtain sensitive information due to improper request validation.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 Mirror for ito a version that resolves this vulnerability.Fixed in 7.4Patch SJ11335 - Upgrade
Upgrade
IBM Db2 Mirror for ito a version that resolves this vulnerability.Fixed in 7.5Patch SJ11336 - Upgrade
Upgrade
IBM Db2 Mirror for ito a version that resolves this vulnerability.Fixed in 7.6Patch SJ11337
Event History
Frequently Asked Questions
What attacker access or user interaction is required for exploitation?
The vector indicates the issue can be exploited over the network without attacker privileges, but it requires user interaction. The available data does not specify what action the user must take.
Which releases are affected?
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are identified as affected.
What is the stated impact?
A remote attacker may obtain sensitive information because of improper request validation. The supplied data also rates confidentiality and integrity impact as low, with no availability impact.