Every CVE Search/ Get API key

CVE-2011-4890

The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to...

4.0 Medium

The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.

Exploit likelihood

2.04%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.

Record
CVE-2011-4890
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.

Record
CVE-2011-4890
Updated
2026-11-02
EUVDEUVD-2011-4807 No score

The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.

Record
EUVD-2011-4807
Updated
2026-11-03
GitHub AdvisoriesGHSA-j76m-4qgg-283p No score

The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to...

The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.

Record
GHSA-j76m-4qgg-283p
Weakness
CWE-20
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-4890 is a medium vulnerability (CVSS 4.0) in Ibm Soliddb, published February 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.

References

Show 4 moreShow less
MoveEnter Open