{"id":"CVE-2026-9736","state":"PUBLISHED","title":"Vulnerabilities exists in IBM Netezza Software","description":"IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.","publishedAt":"2026-09-03T20:42:38.769Z","updatedAt":"2026-09-05T02:18:22.313Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Netezza Software"],"affected":[{"vendor":"IBM","product":"Netezza Software","versions":[{"version":"11.3.0.3","status":"affected","lessThanOrEqual":"Interim Fix 002","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:netezza_software:11.3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:netezza_software:interim:interim_fix_002:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7284359"],"weaknesses":["CWE-117"],"ingestedAt":"2026-10-29T20:13:52.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/9xxx/CVE-2026-9736.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-9736","state":"PUBLISHED","datePublished":"2026-09-03T20:42:38.769Z","dateUpdated":"2026-09-05T02:18:22.313Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2026-05-27T17:27:08.972Z"},"containers":{"cna":{"title":"Vulnerabilities exists in IBM Netezza Software","descriptions":[{"lang":"en","value":"IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files."}],"affected":[{"vendor":"IBM","product":"Netezza Software","versions":[{"version":"11.3.0.3","status":"affected","lessThanOrEqual":"Interim Fix 002","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:netezza_software:11.3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:netezza_software:interim:interim_fix_002:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7284359","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-117","lang":"en","description":"CWE-117 Improper Output Neutralization for Logs","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2026-09-03T20:42:38.769Z"},"solutions":[{"lang":"en","value":"IBM strongly recommends addressing the vulnerability now.\n\n\n\n\n\nFixed Version\n\n\n\nRemediation/Fixes: 11.3.1.3\n\n\n\nIBM Netezza Software\n\n\n\nAvailable from  https://w3.ibm.com/w3publisher/software-downloads","supportingMedia":[{"type":"text/html","base64":false,"value":"<div><p>IBM strongly recommends addressing the vulnerability now.</p></div><div><table><colgroup><col/><col/></colgroup><tbody><tr><td><p>Fixed Version</p></td><td><p>Remediation/Fixes: 11.3.1.3</p></td></tr><tr><td><p>IBM Netezza Software</p></td><td><p>Available from <a href=\"https://w3.ibm.com/w3publisher/software-downloads\" rel=\"nofollow\">https://w3.ibm.com/w3publisher/software-downloads</a></p></td></tr></tbody></table></div><p></p>"}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-05T02:17:24.368152Z","id":"CVE-2026-9736","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-05T02:18:22.313Z"}}]}}}