IBM Db2 for Linux, UNIX and Windows

168 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-3624711.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 XML External Entity ReferenceHIGH 8.20.3 %
CVE-2025-3642511.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Information DisclosureMEDIUM 6.50.2 %
CVE-2025-1386711.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.3 %
CVE-2025-1468912.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.3 %
CVE-2025-266811.5.0 – 11.5.9IBM Db2 Denial of ServiceMEDIUM 6.50.4 %
CVE-2025-3600111.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.4 %
CVE-2025-3600911.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.4 %
CVE-2025-3607011.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceHIGH 7.50.4 %
CVE-2025-3609811.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.4 %
CVE-2025-3612311.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.20.1 %
CVE-2025-3618411.5.0 – 11.5.9IBM Db2 Privilege EscalationHIGH 7.20.5 %
CVE-2025-3635311.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.20.2 %
CVE-2025-3636511.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Privilege EscalationHIGH 7.50.3 %
CVE-2025-3636611.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.4 %
CVE-2025-3638412.1.0 – 12.1.3IBM Db2 Privilege EscalationHIGH 8.40.2 %
CVE-2025-3638711.5.0 – 11.5.9IBM Db2 Denial of ServiceMEDIUM 6.50.4 %
CVE-2025-3640711.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.3 %
CVE-2025-3642312.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.3 %
CVE-2025-3642411.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.4 %
CVE-2025-3642711.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 6.50.4 %
CVE-2025-3642811.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceMEDIUM 5.30.3 %
CVE-2025-3644211.5.0 – 11.5.9 ; 12.1.0 – 12.1.3IBM Db2 Denial of ServiceHIGH 7.50.4 %
CVE-2024-4935011.5.0 – 11.5.9 ; 12.1.0 – 12.1.1 ; 11.1.0 – 11.1.4.7IBM Db2 denial of serviceHIGH 7.50.4 %
CVE-2025-251811.5.0 – 11.5.9 ; 12.1.0 – 12.1.1IBM Db2 denial of serviceHIGH 7.50.4 %
CVE-2025-305011.5.0 – 11.5.9 ; 12.1.0 – 12.1.1IBM Db2 denial of serviceMEDIUM 6.50.4 %
CVE-2025-149312.1.0 – 12.1.1IBM Db2 denial of serviceMEDIUM 5.30.4 %
CVE-2025-091511.5.0 – 11.5.9 ; 12.1.0 – 12.1.1IBM Db2 denial of serviceMEDIUM 6.50.4 %
CVE-2025-100011.5.0 – 11.5.9 ; 12.1.0 – 12.1.1IBM Db2 denial of serviceMEDIUM 6.50.4 %
CVE-2025-199211.5.0 – 11.5.9 ; 12.1.0 – 12.1.1IBM Db2 denial of serviceMEDIUM 6.50.4 %
CVE-2024-5290312.1.0 ; 12.1.1IBM Db2 denial of serviceHIGH 7.50.4 %
CVE-2023-3044310.5, 11.1 ,11.5IBM Db2 denial of serviceMEDIUM 6.50.5 %
CVE-2024-4176210.5, 11.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.4 %
CVE-2024-3707110.5, 11.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.4 %
CVE-2024-4176110.5, 11.1, 11.5IBM Db2 denial of serviceMEDIUM 5.30.4 %
CVE-2024-4566311.1, 11.5, 12.1IBM Db2 denial of serviceHIGH 7.50.7 %
CVE-2024-3188010.5, 11.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.4 %
CVE-2024-3188211.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.6 %
CVE-2024-3752911.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.5 %
CVE-2024-3515211.5IBM Db2 denial of serviceMEDIUM 6.50.6 %
CVE-2024-3513610.5, 11.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.6 %
CVE-2023-2926710.5, 11.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.6 %
CVE-2024-3188110.5, 11.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.6 %
CVE-2024-2876210.5, 11.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.6 %
CVE-2024-2236011.5IBM Db2 for Linux, UNIX and Windows denial of serviceMEDIUM 6.50.7 %
CVE-2023-5229611.5IBM Db2 for Linux, UNIX and Windows denial of serviceMEDIUM 5.30.6 %
CVE-2023-3872910.5, 11.1 ,11.5IBM Db2 information disclosureMEDIUM 6.80.6 %
CVE-2024-2725410.5, 11.1, 11.5IBM Db2 for Linux, UNIX and Windows denial of serviceMEDIUM 6.50.7 %
CVE-2024-2504611.1, 11.5IBM Db2 for Linux, UNIX and Windows denial of serviceMEDIUM 6.50.7 %
CVE-2024-2503011.1IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be rMEDIUM 6.20.2 %
CVE-2023-4714111.5IBM Db2 denial of serviceMEDIUM 6.50.7 %
CVE-2023-4715810.5, 11.1 ,11.5IBM Db2 denial of serviceMEDIUM 6.50.7 %
CVE-2023-4715211.5IBM Db2 information disclosureHIGH 7.50.6 %
CVE-2023-2785910.5, 11.1 ,11.5IBM Db2 code executionMEDIUM 6.51.0 %
CVE-2023-4774710.5, 11.1 ,11.5IBM Db2 denial of serviceMEDIUM 6.50.7 %
CVE-2023-4519311.5IBM Db2 denial of serviceHIGH 7.50.8 %
CVE-2023-5030811.5IBM Db2 denial of serviceMEDIUM 6.50.8 %
CVE-2023-4774610.5, 11.1, 11.5IBM Db2 denial of serviceMEDIUM 6.50.7 %
CVE-2023-2925811.1, 11.5IBM Db2 denial of serviceHIGH 7.51.1 %
CVE-2023-4068710.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.1 %
CVE-2023-3872710.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.1 %
CVE-2023-4770110.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.1 %
CVE-2023-3800310.5, 11.1 ,11.5IBM Db2 command executionHIGH 7.21.1 %
CVE-2023-4616711.5IBM Db2 denial of serviceHIGH 7.51.1 %
CVE-2023-4069210.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.1 %
CVE-2023-4517811.5IBM Db2 denial of serviceHIGH 7.51.1 %
CVE-2023-4037310.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.0 %
CVE-2023-3871911.5IBM Db2 denial of serviceMEDIUM 5.10.2 %
CVE-2023-4037211.5IBM Db2 denial of serviceHIGH 7.51.0 %
CVE-2023-3099111.1, 11.5IBM Db2 denial of serviceHIGH 7.51.0 %
CVE-2023-4037411.5IBM Db2 denial of serviceHIGH 7.50.9 %
CVE-2023-3872810.5, 11.1 ,11.5IBM Db2 denial of serviceHIGH 7.50.9 %
CVE-2023-3874011.5IBM Db2 denial of serviceHIGH 7.50.9 %
CVE-2023-3872011.1 ,11.5IBM Db2 denial of serviceHIGH 7.50.9 %
CVE-2023-3098710.5, 11.1 ,11.5IBM Db2 denial of serviceHIGH 7.50.9 %
CVE-2023-3501211.5IBM Db2 code executionMEDIUM 6.70.2 %
CVE-2023-3044211.1, 11.5IBM Db2 denial of serviceHIGH 7.51.3 %
CVE-2023-3043110.5 11.1 ,11.5IBM Db2 buffer overflowHIGH 8.40.3 %
CVE-2023-2348711.1 ,11.5IBM Db2 audit loggingMEDIUM 4.30.8 %
CVE-2023-2925610.5, 11.1 ,11.5IBM Db2 information disclosureMEDIUM 6.50.8 %
CVE-2023-2786810.5, 11.1 ,11.5IBM Db2 code executionHIGH 8.81.6 %
CVE-2023-2786710.5, 11.1 ,11.5IBM Db2 code executionHIGH 8.81.6 %
CVE-2023-2786910.5, 11.1 ,11.5IBM Db2 code executionHIGH 8.81.6 %
CVE-2023-3044910.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.4 %
CVE-2023-3044510.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.4 %
CVE-2023-3044810.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.4 %
CVE-2023-3044610.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.3 %
CVE-2023-3044710.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.3 %
CVE-2023-2602210.1, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.51.0 %
CVE-2023-2602111.1, 11.5IBM Db2 denial of serviceHIGH 7.51.0 %
CVE-2023-2755511.5IBM Db2 denial of serviceHIGH 7.50.6 %
CVE-2023-2593010.5, 11.1 ,11.5IBM Db2 denial of serviceMEDIUM 5.91.0 %
CVE-2023-2925510.5, 11.1, 11.5IBM DB2 for Linux, UNIX and Windows denial of serviceHIGH 7.51.0 %
CVE-2023-2755910.5, 11.1, 11.5IBM Db2 denial of serviceHIGH 7.50.9 %
CVE-2023-2925710.5, 11.1 ,11.5IBM Db2 code executionHIGH 7.21.5 %
CVE-2022-4393010.5, 11.1, 11.5IBM Db2 for Linux, UNIX and Windows information disclosureHIGH 7.50.5 %
CVE-2022-4392911.1 and 11.5IBM Db2 for Linux, UNIX and Windows denial of serviceHIGH 7.50.7 %
CVE-2022-4392710.5, 11.1 ,11.5IBM Db2 for Linux, UNIX and Windows information disclosureHIGH 7.50.6 %
CVE-2022-3563710.5 ; 11.1 ; 11.5IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL statMEDIUM 6.51.3 %
CVE-2022-2248310.5 ; 10.1 ; 9.7 ; …IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauMEDIUM 6.51.1 %
CVE-2022-2239010.5 ; 10.1 ; 9.7 ; …IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilHIGH 7.51.0 %
CVE-2022-2238910.5 ; 10.1 ; 9.7 ; …IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnormaMEDIUM 6.51.6 %
CVE-2021-3900210.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic alHIGH 7.50.9 %
CVE-2021-3893111.1 ; 11.5IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of aMEDIUM 6.51.2 %
CVE-2021-3892610.5 ; 10.1 ; 9.7 ; …IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privilegeMEDIUM 5.50.3 %
CVE-2021-2967810.5 ; 10.1 ; 9.7 ; …IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority toHIGH 8.71.1 %
CVE-2021-2037310.5 ; 10.1 ; 9.7 ; …IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstHIGH 7.51.5 %
CVE-2021-2982511.1 ; 11.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACHIGH 7.51.5 %
CVE-2021-2976311.1 ; 11.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to MEDIUM 5.10.3 %
CVE-2021-2975211.1 ; 11.5IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specifMEDIUM 4.41.1 %
CVE-2021-2977710.5 ; 10.1 ; 9.7 ; …IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table beMEDIUM 6.51.4 %
CVE-2021-2970310.5 ; 10.1 ; 9.7 ; …Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when HIGH 7.51.7 %
CVE-2021-2057910.5 ; 10.1 ; 9.7 ; …IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create a view oMEDIUM 6.51.1 %
CVE-2019-458810.5 ; 10.1 ; 9.7 ; …IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrHIGH 7.80.3 %
CVE-2020-502510.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, HIGH 8.40.6 %
CVE-2020-502410.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker toHIGH 7.52.0 %
CVE-2020-497610.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and writeMEDIUM 5.10.3 %
CVE-2020-473910.5 ; 10.1 ; 9.7 ; …IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1,HIGH 7.80.5 %
CVE-2020-470110.5 ; 11.1 ; 11.5IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by impropeHIGH 8.40.5 %
CVE-2019-438611.1IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would caMEDIUM 6.52.0 %
CVE-2019-432210.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could HIGH 8.40.5 %
CVE-2019-415410.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could HIGH 8.40.5 %
CVE-2019-410210.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithMEDIUM 5.91.2 %
CVE-2019-410110.5 ; 10.1 ; 11.1IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that haveMEDIUM 6.20.4 %
CVE-2019-405710.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DBMEDIUM 6.70.5 %
CVE-2019-409410.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrustedHIGH 8.40.4 %
CVE-2019-401610.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could HIGH 8.40.5 %
CVE-2019-401510.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could HIGH 8.40.5 %
CVE-2018-198010.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could HIGH 8.40.5 %
CVE-2018-197810.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could HIGH 8.40.5 %
CVE-2018-192310.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability thaHIGH 8.40.5 %
CVE-2018-192210.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability thaHIGH 8.40.5 %
CVE-2018-197711.1IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of service vulnerability. A remote, authenticated DMEDIUM 6.51.9 %
CVE-2018-189710.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, caused by improper bHIGH 8.40.6 %
CVE-2018-185711.1IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow a user to bypass FGAC control and gain access to data theMEDIUM 6.51.7 %
CVE-2018-183410.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a locaHIGH 7.80.4 %
CVE-2018-180210.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrustedHIGH 8.40.4 %
CVE-2018-179910.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivileged user to overwriMEDIUM 6.20.4 %
CVE-2018-178110.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access bHIGH 8.40.5 %
CVE-2018-178010.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 instance owner to obtainHIGH 7.80.5 %
CVE-2018-171110.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges dHIGH 8.40.4 %
CVE-2018-171010.5 ; 10.1 ; 11.1IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerabiHIGH 8.40.5 %
CVE-2018-156610.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to execute arbitrary coHIGH 8.40.5 %
CVE-2018-148710.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted HIGH 8.40.4 %
CVE-2018-145810.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to execute arbitrary codHIGH 7.81.7 %
CVE-2018-156510.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer whHIGH 8.40.4 %
CVE-2018-154410.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer whHIGH 8.40.4 %
CVE-2018-151510.5 ; 11.1IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1, under specific or unusual conditions, could allow a local uHIGH 7.40.3 %
CVE-2018-148810.5 ; 11.1IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1 is vulnerable to a buffer overflow, which could allow an autHIGH 8.40.5 %
CVE-2018-145910.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based buffer overflow, caHIGH 7.80.5 %
CVE-2018-145210.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a locaMEDIUM 5.50.4 %
CVE-2018-145110.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a locaMEDIUM 5.50.4 %
CVE-2018-145010.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a locaMEDIUM 5.50.4 %
CVE-2018-144910.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a locaMEDIUM 5.50.4 %
CVE-2018-144810.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a locaHIGH 7.70.4 %
CVE-2018-142810.5 ; 10.1 ; 9.7 ; …IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic algorithms that could alloMEDIUM 6.20.3 %
CVE-2018-142710.5 ; 10.1 ; 9.7 ; …IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker couldMEDIUM 6.20.4 %
CVE-2018-142610.5 ; 10.1 ; 9.7 ; …IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multipleCRITICAL 9.12.4 %
CVE-2017-167710.5 ; 10.1 ; 9.7 ; …IBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) deserializes the contents of /tmp/cHIGH 7.80.7 %
CVE-2017-157110.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected cryptographic algorithMEDIUM 5.50.2 %
CVE-2017-152010.5 ; 10.1 ; 9.7 ; …IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication typeLOW 3.71.3 %
CVE-2017-151910.5 ; 11.1IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setupMEDIUM 5.91.7 %
CVE-2017-145210.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated privHIGH 7.80.4 %
CVE-2017-145110.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance ownerHIGH 7.80.4 %
CVE-2017-143910.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance ownerMEDIUM 6.70.4 %
CVE-2017-143810.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance ownerMEDIUM 6.70.4 %
CVE-2017-143411.1IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive informatioMEDIUM 4.70.3 %
CVE-2017-129710.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, HIGH 7.31.5 %
CVE-2017-110510.5 ; 10.1 ; 9.7 ; …IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could alHIGH 7.10.4 %