The vulnerability permits an authenticated user to bypass client‑side validation and manipulate input data through man‑in‑the‑middle techniques. This weakness, classified as CWE‑294, can lead to tampering of database commands or data, compromising integrity and potentially confidentiality of the database content.

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in the 4.8, 5.0, 5.1, 5.2, and 5.3 releases are affected.

The CVSS score of 5.3 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. It is likely that exploitation requires a network‑based attack where the adversary authenticates with valid credentials and positions a man‑in‑the‑middle to alter input streams. If these conditions are met, an attacker could change query parameters or inject malicious data into the system.