{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-9736", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-05-27T17:27:08.972Z", "datePublished": "2026-09-03T20:42:38.769Z", "dateUpdated": "2026-09-03T20:42:38.769Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-03T20:42:38.769Z"}, "title": "Vulnerabilities exists in IBM Netezza Software", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-117", "description": "CWE-117 Improper Output Neutralization for Logs", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Netezza Software", "versions": [{"status": "affected", "version": "11.3.0.3", "lessThanOrEqual": "Interim Fix 002", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:netezza_software:11.3.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:netezza_software:interim:interim_fix_002:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7284359", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\n\n\nFixed Version\n\n\n\nRemediation/Fixes: 11.3.1.3\n\n\n\nIBM Netezza Software\n\n\n\nAvailable from https://w3.ibm.com/w3publisher/software-downloads", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><p>IBM strongly recommends addressing the vulnerability now.</p></div><div><table><colgroup><col/><col/></colgroup><tbody><tr><td><p>Fixed Version</p></td><td><p>Remediation/Fixes: 11.3.1.3</p></td></tr><tr><td><p>IBM Netezza Software</p></td><td><p>Available from <a href=\"https://w3.ibm.com/w3publisher/software-downloads\" rel=\"nofollow\">https://w3.ibm.com/w3publisher/software-downloads</a></p></td></tr></tbody></table></div><p></p>"}]}]}}}

{}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:netezza_software:11.3.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:netezza_software:interim:interim_fix_002:*:*:*:*:*:*"], "product": "Netezza Software", "vendor": "IBM", "versions": [{"lessThanOrEqual": "Interim Fix 002", "status": "affected", "version": "11.3.0.3", "versionType": "semver"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files."}], "id": "CVE-2026-9736", "lastModified": "2026-09-03T21:17:24.560", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "[email protected]", "type": "Primary"}]}, "published": "2026-09-03T21:17:24.560", "references": [{"source": "[email protected]", "url": "https://www.ibm.com/support/pages/node/7284359"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-117"}], "source": "[email protected]", "type": "Primary"}]}

{}

{"created": "2026-09-03T21:30:06.252375+00:00", "title": "Log Injection Vulnerability in IBM Netezza Software 11.3.0.3 Through Interim Fix 002", "updated": "2026-09-03T21:30:06.252381+00:00", "vendors": []}