Ibm

Db2

340 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-11906

  • EPSS 0.41%
  • Veröffentlicht 30.06.2026 20:17:28
  • Zuletzt bearbeitet 02.07.2026 18:36:32

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query log...

9.8

CVE-2026-10109

  • EPSS 0.86%
  • Veröffentlicht 30.06.2026 20:17:26
  • Zuletzt bearbeitet 02.07.2026 16:46:53

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

6.5

CVE-2025-36372

  • EPSS 0.15%
  • Veröffentlicht 30.06.2026 20:17:25
  • Zuletzt bearbeitet 02.07.2026 19:16:23

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

5.3

CVE-2023-33854

  • EPSS 0.19%
  • Veröffentlicht 22.06.2026 14:31:21
  • Zuletzt bearbeitet 30.06.2026 15:03:14

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and manipulate input data using man in the middle techniques.

6.5

CVE-2025-2669

  • EPSS 0.2%
  • Veröffentlicht 22.06.2026 13:18:42
  • Zuletzt bearbeitet 30.06.2026 15:46:55

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive information outside of their authority due to improper token validation.

6.5

CVE-2024-54178

  • EPSS 0.24%
  • Veröffentlicht 22.06.2026 13:15:30
  • Zuletzt bearbeitet 30.06.2026 15:47:16

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8,5.0,5.1,5.2,5.3 could allow an authenticated user to cause a denial of service when creating new databases due to improper allocation of resources.

7.5

CVE-2026-6938

  • EPSS 0.19%
  • Veröffentlicht 27.05.2026 13:11:31
  • Zuletzt bearbeitet 28.05.2026 15:41:42

IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.

5.5

CVE-2026-6053

  • EPSS 0.1%
  • Veröffentlicht 27.05.2026 13:10:05
  • Zuletzt bearbeitet 28.05.2026 15:46:36

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables.

7.5

CVE-2026-6052

  • EPSS 0.24%
  • Veröffentlicht 27.05.2026 13:09:29
  • Zuletzt bearbeitet 28.05.2026 15:51:31

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.

7.5

CVE-2026-6051

  • EPSS 0.18%
  • Veröffentlicht 27.05.2026 13:07:47
  • Zuletzt bearbeitet 28.05.2026 15:55:06

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.