IBM Support

Security vulnerabilities have been identified in IBM® DB2® shipped with Tivoli Workload Scheduler (CVE-2013-6747, CVE-2014-0963)

Flashes (Alerts)


Abstract

IBM DB2 is shipped as a component of Tivoli Workload Scheduler. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin.

Content

Vulnerability Details
Please consult the security bulletin IBM® DB2® is impacted by multiple TLS/SSL security vulnerabilities (CVE-2013-6747, CVE-2014-0963) for vulnerability details.

Affected Products and Versions

Please verify the version of DB2 that is running in your TWS environment and refer to the list below and the DB2 bulletin
http://www-01.ibm.com/support/docview.wss?uid=swg21671732

Principal Product and Version(s)Affected Supporting Product and Version
TWS 8.4.0
TWS 8.5.0
TWS 8.5.1
TWS 8.6.0
TWS 9.1.0
TWS 9.2.0
IBM DB2 Enterprise Server Edition 9.1
IBM DB2 Enterprise Server Edition 9.1 and 9.5
IBM DB2 Enterprise Server Edition 9.5 and 9.7
IBM DB2 Enterprise Server Edition 9.1, 9.5, 9.7 and 10.1
IBM DB2 Enterprise Server Edition 9.7 and 10.1
IBM DB2 Enterprise Server Edition 10.1 and 10.5



Related Information
IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog

Related Information

[{"Product":{"code":"SSGSPN","label":"IBM Workload Scheduler"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"DB2","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.4;8.5;8.5.1;8.6;9.1;9.2","Edition":"All Editions","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
25 September 2022

UID

swg21674761