CVE-2015-0157
Status: ModifiedMedium (6.8)—
Severity6.8Medium · CVSS 2.0
Exploitation probability2.52 %higher than 85% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by leveraging an unspecified scalar function in a SQL statement.
CVSS
- Base score
- 6.8
- Version
- 2.0
- Vector
- AV:N/AC:L/Au:S/C:N/I:N/A:C
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 2.52 %
- Percentile among all scored CVEs
- 85
- Score date
- 10/23/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-20
References
Show 14 references
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07103
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07107
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07108
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07109
- http://www-01.ibm.com/support/docview.wss?uid=swg21697987
- http://www.securityfocus.com/bid/75947
- http://www.securitytracker.com/id/1032882
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07103
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07107
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07108
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07109
- http://www-01.ibm.com/support/docview.wss?uid=swg21697987
- http://www.securityfocus.com/bid/75947
- http://www.securitytracker.com/id/1032882
Raw JSON (NVD)
Show
{
"id": "CVE-2015-0157",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": true,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2015-07-20T01:59:03.253",
"references": [
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT07103",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT07107",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT07108",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT07109",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21697987",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securityfocus.com/bid/75947",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securitytracker.com/id/1032882",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT07103",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT07107",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT07108",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT07109",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21697987",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/75947",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1032882",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by leveraging an unspecified scalar function in a SQL statement."
},
{
"lang": "es",
"value": "Vulnerabilidad en IBM DB2 9.7 a través de FP10, 9.8 a través de FP5, 10.1 anterior a FP5 y 10.5 a través de FP5 en Linux, UNIX y Windows permite a usuarios remotos autenticados causar una denegación de servicio (caída del demonio) aprovechando una función escalar no especificada en una sentencia SQL."
}
],
"lastModified": "2026-06-17T00:19:39.430",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D9E7D2A-42B9-4D07-A107-BBD839E59858"
},
{
"criteria": "cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD27164C-7554-46E1-B755-27C74D2EC3B7"
},
{
"criteria": "cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F199F7B4-F273-4D45-AE08-7B5DAE6E0794"
},
{
"criteria": "cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACEB3F4A-6411-4456-9B89-A43562189BD3"
},
{
"criteria": "cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1749B7DC-08BB-474B-BA5A-52602459C8EC"
},
{
"criteria": "cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "025FA405-0FD2-4B19-8FA4-15581085BD15"
},
{
"criteria": "cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_workgroup:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F425C545-39CD-483C-97A3-BE0DC3EE63DB"
},
{
"criteria": "cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A6A7680-D883-414F-965B-1D6136760CA5"
},
{
"criteria": "cpe:2.3:a:ibm:db2:9.8:*:*:*:express:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76107CFE-EB32-4AF6-9AF9-F16238F9C671"
},
{
"criteria": "cpe:2.3:a:ibm:db2:9.8:*:*:*:workgroup:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D1225B0-DBFF-4A13-93CB-1B64AF9ACE47"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ECC11D3-7D77-4823-8B34-DD76E131D74C"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1D36687-32AF-43E2-97D9-FDF602F89318"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD80ADF4-35D3-4534-AACD-C00D80870723"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D274B00-C986-4A5D-94B2-79F4A613D951"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67A935CA-7AF6-4DA9-958E-DF4BC8E2B3BF"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6B1A4DC-7062-4349-8D1A-3DE4B0E68FC8"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3681F43-F23B-413D-B871-A40821F4988B"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE645126-ECD0-40FB-B2BA-5C9EF33EBE69"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AFEA656-426C-4F18-9737-8985531C7A93"
},
{
"criteria": "cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09B0333F-0E27-40B3-A0DC-618BEA97CBC2"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}