CVE-2008-1998

HIGH · CVSS 8.5 EPSS 2.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-04-28 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-1998

Severity

HIGH

CVSS

8.5

EPSS

2.50%

Windows

Original Filing — NVD Description

The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter.