Known vulnerabilities in Informix Dynamic Server

Software CPE: cpe:2.3:a:ibm_corporation:informix_dynamic_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 75
Public exploits: 2
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Informix Dynamic Server Informix Dynamic Server is affected by 75 known vulnerabilities: 1 critical, 6 high, 44 medium, 24 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146518 - Improper input validation
CVE-2026-54272
CWE-20 Medium
No
No
14.10.FC14W1, 15.0.1.16 31.08.2026 SB20260831108
SB20260831126
SB20260831127
and 3 more
#VU146517 - Improper input validation
CVE-2026-69198
CWE-20 Medium
No
No
14.10.FC14W1, 15.0.1.16 31.08.2026 SB20260831107
SB2026091024
#VU146374 - Server-Side Request Forgery (SSRF)
CVE-2026-69192
CWE-918 Medium
No
No
14.10.FC14W1, 15.0.1.16 31.08.2026 SB2026083145
SB2026083146
SB2026083185
and 2 more
#VU140824 - Inefficient Algorithmic Complexity
CVE-2026-71848
CWE-407 Medium
No
No
14.10.FC14W1, 15.0.1.16 03.08.2026 SB2026080392
SB2026090813
SB2026091017
#VU140823 - Exposure of sensitive information to an unauthorized actor
CVE-2026-71849
CWE-200 Low
No
No
14.10.FC14W1, 15.0.1.16 03.08.2026 SB2026080392
SB2026090813
SB2026091017
#VU140822 - Exposure of Data Element to Wrong Session
CVE-2026-71850
CWE-488 Low
No
No
14.10.FC14W1, 15.0.1.16 03.08.2026 SB2026080392
SB2026090813
SB2026091017
#VU140086 - Insufficient Verification of Data Authenticity
CVE-2026-68945
CWE-345 High
No
No
14.10.FC14W1, 15.0.1.16 30.07.2026 SB2026073017
SB2026090808
SB2026091019
#VU140085 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69151
CWE-79 Low
No
No
14.10.FC14W1, 15.0.1.16 30.07.2026 SB2026073016
SB2026090808
SB2026091022
and 1 more
#VU140032 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-15157
CWE-93 Low
No
No
14.10.FC14W1, 15.0.1.16 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 5 more
#VU139375 - Uncontrolled Recursion
CVE-2026-73566
CWE-674 Medium
No
No
14.10.FC14W1, 15.0.1.16 26.07.2026 SB2026072605
SB2026091637
SB2026091642
and 2 more
#VU138958 - Use of Less Trusted Source
CVE-2026-54289
CWE-348 Medium
No
No
14.10.FC14, 15.0.1.14 21.07.2026 SB20260721144
SB2026072415
SB20260917199
#VU138950 - Overly Permissive Cross-domain Whitelist
CVE-2026-54290
CWE-942 High
No
No
14.10.FC14, 15.0.1.14 21.07.2026 SB20260721126
SB2026072415
SB20260917199
#VU138923 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54286
CWE-22 High
No
No
14.10.FC14, 15.0.1.14 21.07.2026 SB2026072198
SB2026072415
SB20260917199
#VU138921 - Improper Encoding or Escaping of Output
CVE-2026-54287
CWE-116 Medium
No
No
14.10.FC14, 15.0.1.14 21.07.2026 SB2026072197
SB2026072415
SB20260917199
#VU138920 - Insufficient Verification of Data Authenticity
CVE-2026-54288
CWE-345 Medium
No
No
14.10.FC14, 15.0.1.14 21.07.2026 SB2026072196
SB2026072415
SB20260917199
#VU137399 - Improper input validation
CVE-2026-6790
CWE-20 Medium
No
No
14.10.FC14, 15.0.1.14 13.07.2026 SB2026071349
SB2026091018
SB20260917198
and 3 more
#VU127577 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1527
CWE-93 Low
No
No
14.10.FC14W1, 15.0.1.16 24.04.2026 SB20260424137
SB20260424148
SB20260424153
and 11 more
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332
CWE-444 Medium
No
No
14.10.FC14, 15.0.1.14 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 14 more
#VU123576 - Improper input validation
CVE-2025-11143
CWE-20 Low
No
No
14.10.FC14, 15.0.1.14 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 13 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-35948
CWE-93 Medium
No
No
14.10.FC14W1, 15.0.1.16 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 8 more


Showing elements 1 - 20 out of 75