CVE-2026-17209

MediumCVSS 6.3

Published: 14/08/2026(UTC)Updated: 21/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

36th percentile - higher than 36% of all known CVEs

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting.

An attacker could inject malicious scripts that execute in another user's browser, potentially leading to session theft or account takeover.

It is recommended to update Db2 Mirror for i to a patched version and implement input filtering and output encoding.

Original NVD description (English source)

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting.