Monthly
Local privilege escalation in IBM Informix Dynamic Server 14.10 allows a user who already holds a low-privilege account on the database host to log into the Informix server as administrator without supplying a password, giving full control over the database engine and its data. The issue is strictly local - the assessed CVSS:3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 7.8 High) requires pre-existing access to the host and no user interaction, so it is not remotely exploitable and cannot be triggered against a system the attacker cannot already log into. Risk signals point to a genuine but locally-scoped flaw rather than a remote emergency: EPSS is 0.02% (5th percentile), the CVE is not in CISA KEV, and no public exploit code has been identified at time of analysis.
Local privilege escalation in IBM Informix Dynamic Server 14.10 allows a user who already holds a low-privilege account on the database host to log into the Informix server as administrator without supplying a password, giving full control over the database engine and its data. The issue is strictly local - the assessed CVSS:3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 7.8 High) requires pre-existing access to the host and no user interaction, so it is not remotely exploitable and cannot be triggered against a system the attacker cannot already log into. Risk signals point to a genuine but locally-scoped flaw rather than a remote emergency: EPSS is 0.02% (5th percentile), the CVE is not in CISA KEV, and no public exploit code has been identified at time of analysis.