IBM Db2 for Linux, UNIX and Windows
168 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-36247 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 XML External Entity Reference | HIGH 8.2 | 0.3 % | ||
| CVE-2025-36425 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Information Disclosure | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-13867 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-14689 | 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-2668 | 11.5.0 – 11.5.9 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-36001 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-36009 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-36070 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | HIGH 7.5 | 0.4 % | ||
| CVE-2025-36098 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-36123 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.2 | 0.1 % | ||
| CVE-2025-36184 | 11.5.0 – 11.5.9 | IBM Db2 Privilege Escalation | HIGH 7.2 | 0.5 % | ||
| CVE-2025-36353 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.2 | 0.2 % | ||
| CVE-2025-36365 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Privilege Escalation | HIGH 7.5 | 0.3 % | ||
| CVE-2025-36366 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-36384 | 12.1.0 – 12.1.3 | IBM Db2 Privilege Escalation | HIGH 8.4 | 0.2 % | ||
| CVE-2025-36387 | 11.5.0 – 11.5.9 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-36407 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-36423 | 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-36424 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-36427 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-36428 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | MEDIUM 5.3 | 0.3 % | ||
| CVE-2025-36442 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.3 | IBM Db2 Denial of Service | HIGH 7.5 | 0.4 % | ||
| CVE-2024-49350 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.1 ; 11.1.0 – 11.1.4.7 | IBM Db2 denial of service | HIGH 7.5 | 0.4 % | ||
| CVE-2025-2518 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.1 | IBM Db2 denial of service | HIGH 7.5 | 0.4 % | ||
| CVE-2025-3050 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.1 | IBM Db2 denial of service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-1493 | 12.1.0 – 12.1.1 | IBM Db2 denial of service | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-0915 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.1 | IBM Db2 denial of service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-1000 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.1 | IBM Db2 denial of service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-1992 | 11.5.0 – 11.5.9 ; 12.1.0 – 12.1.1 | IBM Db2 denial of service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-52903 | 12.1.0 ; 12.1.1 | IBM Db2 denial of service | HIGH 7.5 | 0.4 % | ||
| CVE-2023-30443 | 10.5, 11.1 ,11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-41762 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-37071 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-41761 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 5.3 | 0.4 % | ||
| CVE-2024-45663 | 11.1, 11.5, 12.1 | IBM Db2 denial of service | HIGH 7.5 | 0.7 % | ||
| CVE-2024-31880 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-31882 | 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.6 % | ||
| CVE-2024-37529 | 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-35152 | 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.6 % | ||
| CVE-2024-35136 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-29267 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.6 % | ||
| CVE-2024-31881 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.6 % | ||
| CVE-2024-28762 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.6 % | ||
| CVE-2024-22360 | 11.5 | IBM Db2 for Linux, UNIX and Windows denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-52296 | 11.5 | IBM Db2 for Linux, UNIX and Windows denial of service | MEDIUM 5.3 | 0.6 % | ||
| CVE-2023-38729 | 10.5, 11.1 ,11.5 | IBM Db2 information disclosure | MEDIUM 6.8 | 0.6 % | ||
| CVE-2024-27254 | 10.5, 11.1, 11.5 | IBM Db2 for Linux, UNIX and Windows denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2024-25046 | 11.1, 11.5 | IBM Db2 for Linux, UNIX and Windows denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2024-25030 | 11.1 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be r | MEDIUM 6.2 | 0.2 % | ||
| CVE-2023-47141 | 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-47158 | 10.5, 11.1 ,11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-47152 | 11.5 | IBM Db2 information disclosure | HIGH 7.5 | 0.6 % | ||
| CVE-2023-27859 | 10.5, 11.1 ,11.5 | IBM Db2 code execution | MEDIUM 6.5 | 1.0 % | ||
| CVE-2023-47747 | 10.5, 11.1 ,11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-45193 | 11.5 | IBM Db2 denial of service | HIGH 7.5 | 0.8 % | ||
| CVE-2023-50308 | 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-47746 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | MEDIUM 6.5 | 0.7 % | ||
| CVE-2023-29258 | 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.1 % | ||
| CVE-2023-40687 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.1 % | ||
| CVE-2023-38727 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.1 % | ||
| CVE-2023-47701 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.1 % | ||
| CVE-2023-38003 | 10.5, 11.1 ,11.5 | IBM Db2 command execution | HIGH 7.2 | 1.1 % | ||
| CVE-2023-46167 | 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.1 % | ||
| CVE-2023-40692 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.1 % | ||
| CVE-2023-45178 | 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.1 % | ||
| CVE-2023-40373 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.0 % | ||
| CVE-2023-38719 | 11.5 | IBM Db2 denial of service | MEDIUM 5.1 | 0.2 % | ||
| CVE-2023-40372 | 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.0 % | ||
| CVE-2023-30991 | 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.0 % | ||
| CVE-2023-40374 | 11.5 | IBM Db2 denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2023-38728 | 10.5, 11.1 ,11.5 | IBM Db2 denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2023-38740 | 11.5 | IBM Db2 denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2023-38720 | 11.1 ,11.5 | IBM Db2 denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2023-30987 | 10.5, 11.1 ,11.5 | IBM Db2 denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2023-35012 | 11.5 | IBM Db2 code execution | MEDIUM 6.7 | 0.2 % | ||
| CVE-2023-30442 | 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.3 % | ||
| CVE-2023-30431 | 10.5 11.1 ,11.5 | IBM Db2 buffer overflow | HIGH 8.4 | 0.3 % | ||
| CVE-2023-23487 | 11.1 ,11.5 | IBM Db2 audit logging | MEDIUM 4.3 | 0.8 % | ||
| CVE-2023-29256 | 10.5, 11.1 ,11.5 | IBM Db2 information disclosure | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-27868 | 10.5, 11.1 ,11.5 | IBM Db2 code execution | HIGH 8.8 | 1.6 % | ||
| CVE-2023-27867 | 10.5, 11.1 ,11.5 | IBM Db2 code execution | HIGH 8.8 | 1.6 % | ||
| CVE-2023-27869 | 10.5, 11.1 ,11.5 | IBM Db2 code execution | HIGH 8.8 | 1.6 % | ||
| CVE-2023-30449 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.4 % | ||
| CVE-2023-30445 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.4 % | ||
| CVE-2023-30448 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.4 % | ||
| CVE-2023-30446 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.3 % | ||
| CVE-2023-30447 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.3 % | ||
| CVE-2023-26022 | 10.1, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.0 % | ||
| CVE-2023-26021 | 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 1.0 % | ||
| CVE-2023-27555 | 11.5 | IBM Db2 denial of service | HIGH 7.5 | 0.6 % | ||
| CVE-2023-25930 | 10.5, 11.1 ,11.5 | IBM Db2 denial of service | MEDIUM 5.9 | 1.0 % | ||
| CVE-2023-29255 | 10.5, 11.1, 11.5 | IBM DB2 for Linux, UNIX and Windows denial of service | HIGH 7.5 | 1.0 % | ||
| CVE-2023-27559 | 10.5, 11.1, 11.5 | IBM Db2 denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2023-29257 | 10.5, 11.1 ,11.5 | IBM Db2 code execution | HIGH 7.2 | 1.5 % | ||
| CVE-2022-43930 | 10.5, 11.1, 11.5 | IBM Db2 for Linux, UNIX and Windows information disclosure | HIGH 7.5 | 0.5 % | ||
| CVE-2022-43929 | 11.1 and 11.5 | IBM Db2 for Linux, UNIX and Windows denial of service | HIGH 7.5 | 0.7 % | ||
| CVE-2022-43927 | 10.5, 11.1 ,11.5 | IBM Db2 for Linux, UNIX and Windows information disclosure | HIGH 7.5 | 0.6 % | ||
| CVE-2022-35637 | 10.5 ; 11.1 ; 11.5 | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL stat | MEDIUM 6.5 | 1.3 % | ||
| CVE-2022-22483 | 10.5 ; 10.1 ; 9.7 ; … | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unau | MEDIUM 6.5 | 1.1 % | ||
| CVE-2022-22390 | 10.5 ; 10.1 ; 9.7 ; … | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privil | HIGH 7.5 | 1.0 % | ||
| CVE-2022-22389 | 10.5 ; 10.1 ; 9.7 ; … | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnorma | MEDIUM 6.5 | 1.6 % | ||
| CVE-2021-39002 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic al | HIGH 7.5 | 0.9 % | ||
| CVE-2021-38931 | 11.1 ; 11.5 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a | MEDIUM 6.5 | 1.2 % | ||
| CVE-2021-38926 | 10.5 ; 10.1 ; 9.7 ; … | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privilege | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-29678 | 10.5 ; 10.1 ; 9.7 ; … | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to | HIGH 8.7 | 1.1 % | ||
| CVE-2021-20373 | 10.5 ; 10.1 ; 9.7 ; … | IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumst | HIGH 7.5 | 1.5 % | ||
| CVE-2021-29825 | 11.1 ; 11.5 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BAC | HIGH 7.5 | 1.5 % | ||
| CVE-2021-29763 | 11.1 ; 11.5 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to | MEDIUM 5.1 | 0.3 % | ||
| CVE-2021-29752 | 11.1 ; 11.5 | IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specif | MEDIUM 4.4 | 1.1 % | ||
| CVE-2021-29777 | 10.5 ; 10.1 ; 9.7 ; … | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table be | MEDIUM 6.5 | 1.4 % | ||
| CVE-2021-29703 | 10.5 ; 10.1 ; 9.7 ; … | Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when | HIGH 7.5 | 1.7 % | ||
| CVE-2021-20579 | 10.5 ; 10.1 ; 9.7 ; … | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create a view o | MEDIUM 6.5 | 1.1 % | ||
| CVE-2019-4588 | 10.5 ; 10.1 ; 9.7 ; … | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitr | HIGH 7.8 | 0.3 % | ||
| CVE-2020-5025 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, | HIGH 8.4 | 0.6 % | ||
| CVE-2020-5024 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to | HIGH 7.5 | 2.0 % | ||
| CVE-2020-4976 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write | MEDIUM 5.1 | 0.3 % | ||
| CVE-2020-4739 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, | HIGH 7.8 | 0.5 % | ||
| CVE-2020-4701 | 10.5 ; 11.1 ; 11.5 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by imprope | HIGH 8.4 | 0.5 % | ||
| CVE-2019-4386 | 11.1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would ca | MEDIUM 6.5 | 2.0 % | ||
| CVE-2019-4322 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could | HIGH 8.4 | 0.5 % | ||
| CVE-2019-4154 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could | HIGH 8.4 | 0.5 % | ||
| CVE-2019-4102 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorith | MEDIUM 5.9 | 1.2 % | ||
| CVE-2019-4101 | 10.5 ; 10.1 ; 11.1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have | MEDIUM 6.2 | 0.4 % | ||
| CVE-2019-4057 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB | MEDIUM 6.7 | 0.5 % | ||
| CVE-2019-4094 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted | HIGH 8.4 | 0.4 % | ||
| CVE-2019-4016 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could | HIGH 8.4 | 0.5 % | ||
| CVE-2019-4015 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could | HIGH 8.4 | 0.5 % | ||
| CVE-2018-1980 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could | HIGH 8.4 | 0.5 % | ||
| CVE-2018-1978 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could | HIGH 8.4 | 0.5 % | ||
| CVE-2018-1923 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability tha | HIGH 8.4 | 0.5 % | ||
| CVE-2018-1922 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability tha | HIGH 8.4 | 0.5 % | ||
| CVE-2018-1977 | 11.1 | IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of service vulnerability. A remote, authenticated D | MEDIUM 6.5 | 1.9 % | ||
| CVE-2018-1897 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, caused by improper b | HIGH 8.4 | 0.6 % | ||
| CVE-2018-1857 | 11.1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow a user to bypass FGAC control and gain access to data the | MEDIUM 6.5 | 1.7 % | ||
| CVE-2018-1834 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a loca | HIGH 7.8 | 0.4 % | ||
| CVE-2018-1802 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted | HIGH 8.4 | 0.4 % | ||
| CVE-2018-1799 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivileged user to overwri | MEDIUM 6.2 | 0.4 % | ||
| CVE-2018-1781 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access b | HIGH 8.4 | 0.5 % | ||
| CVE-2018-1780 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 instance owner to obtain | HIGH 7.8 | 0.5 % | ||
| CVE-2018-1711 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges d | HIGH 8.4 | 0.4 % | ||
| CVE-2018-1710 | 10.5 ; 10.1 ; 11.1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerabi | HIGH 8.4 | 0.5 % | ||
| CVE-2018-1566 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to execute arbitrary co | HIGH 8.4 | 0.5 % | ||
| CVE-2018-1487 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted | HIGH 8.4 | 0.4 % | ||
| CVE-2018-1458 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to execute arbitrary cod | HIGH 7.8 | 1.7 % | ||
| CVE-2018-1565 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer wh | HIGH 8.4 | 0.4 % | ||
| CVE-2018-1544 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer wh | HIGH 8.4 | 0.4 % | ||
| CVE-2018-1515 | 10.5 ; 11.1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1, under specific or unusual conditions, could allow a local u | HIGH 7.4 | 0.3 % | ||
| CVE-2018-1488 | 10.5 ; 11.1 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1 is vulnerable to a buffer overflow, which could allow an aut | HIGH 8.4 | 0.5 % | ||
| CVE-2018-1459 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based buffer overflow, ca | HIGH 7.8 | 0.5 % | ||
| CVE-2018-1452 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a loca | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-1451 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a loca | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-1450 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a loca | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-1449 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a loca | MEDIUM 5.5 | 0.4 % | ||
| CVE-2018-1448 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a loca | HIGH 7.7 | 0.4 % | ||
| CVE-2018-1428 | 10.5 ; 10.1 ; 9.7 ; … | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic algorithms that could allo | MEDIUM 6.2 | 0.3 % | ||
| CVE-2018-1427 | 10.5 ; 10.1 ; 9.7 ; … | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could | MEDIUM 6.2 | 0.4 % | ||
| CVE-2018-1426 | 10.5 ; 10.1 ; 9.7 ; … | IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple | CRITICAL 9.1 | 2.4 % | ||
| CVE-2017-1677 | 10.5 ; 10.1 ; 9.7 ; … | IBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) deserializes the contents of /tmp/c | HIGH 7.8 | 0.7 % | ||
| CVE-2017-1571 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected cryptographic algorith | MEDIUM 5.5 | 0.2 % | ||
| CVE-2017-1520 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type | LOW 3.7 | 1.3 % | ||
| CVE-2017-1519 | 10.5 ; 11.1 | IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setup | MEDIUM 5.9 | 1.7 % | ||
| CVE-2017-1452 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated priv | HIGH 7.8 | 0.4 % | ||
| CVE-2017-1451 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner | HIGH 7.8 | 0.4 % | ||
| CVE-2017-1439 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner | MEDIUM 6.7 | 0.4 % | ||
| CVE-2017-1438 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner | MEDIUM 6.7 | 0.4 % | ||
| CVE-2017-1434 | 11.1 | IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive informatio | MEDIUM 4.7 | 0.3 % | ||
| CVE-2017-1297 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, | HIGH 7.3 | 1.5 % | ||
| CVE-2017-1105 | 10.5 ; 10.1 ; 9.7 ; … | IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could al | HIGH 7.1 | 0.4 % |