Read the docs

Ingres

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ingres records in CISA KEV

No Ingres vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Database Server 4 records MEDIUM Ingres 3 records LOW

Records

3 records in Ingres · all components

TI-2007-06041 CVE-2007-6334 · GHSA-5c6j-4cmg-9vw5

Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other…

Priority LOW 26

Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01814 Published 2007-12-20 No fix listed CWE-264
TI-2008-03250 CVE-2008-3389 · GHSA-95vq-m8f4-gh6c

Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release…

Priority LOW 22

Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long va…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00444 Published 2008-08-05 No fix listed CWE-119
TI-2008-03217 CVE-2008-3356 · GHSA-cgvm-rcgv-pjm9

verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka…

Priority LOW 21

verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the a…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00374 Published 2008-08-05 No fix listed CWE-264
Open these records in search →