IBM Support

IBM Security Guardium CVE Vulnerability Tests for DB2 z/OS

Question & Answer


Question

Why don't I see any CVE tests when I select DB2 on z/OS? 

Cause

You need to make sure all potential vulnerabilities are being scanned.   

Answer

For DB2 i and z/OS, Guardium doesn't offer CVE tests.  Instead, it offers Security APAR tests. These are native to these two DB2 types.  All Security vulnerabilities are reported via IBM Security APAR for these two databases.  
 

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Component":"","Platform":[{"code":"PF035","label":"z\/OS"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
18 February 2019

UID

ibm10872282