← Back

Db2

db2

Vendor: Ibm • 339 CVEs

CVEs (339)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ibm
1Db2
Jun 17, 2026
Dec 3, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073.
1Ibm
1Db2
Jun 17, 2026
Oct 17, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574.
1Ibm
1Db2
Jun 17, 2026
Oct 17, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables. IBM X-Force ID: 263499.
1Ibm
1Db2
Jun 17, 2026
Oct 17, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation on DPF. IBM X-Force ID: 261607.
1Ibm
1Db2
Jun 17, 2026
Oct 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted query statement. IBM X-Force ID: 263575.
1Ibm
1Db2
Jun 17, 2026
Oct 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 254037.
1Ibm
1Db2
Jun 17, 2026
Oct 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613.
1Ibm
1Db2
Jun 17, 2026
Oct 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query statement. IBM X-Force ID: 262258.
1Ibm
1Db2
Jun 17, 2026
Oct 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 and 11.5 is vulnerable to denial of service with a specially crafted ALTER TABLE statement. IBM X-Force ID: 261616.
1Ibm
1Db2
Jun 17, 2026
Oct 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440.
1Ibm
1Db2
Jun 17, 2026
Jul 17, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with SYSADM privileg...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with SYSADM privileges could overflow the buffer and execute arbitrary code on the system. IBM X-Force ID: 257763.Show less
1Ibm
1Db2
Jun 17, 2026
Jul 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439.
1Ibm
1Db2
Jun 17, 2026
Jul 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437.
1Ibm
1Db2
Jun 17, 2026
Jul 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253436.
1Ibm
1Db2
Jun 17, 2026
Jul 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253361 .
1Ibm
1Db2
Jun 17, 2026
Jul 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357.
1Ibm
1Db2
Jun 17, 2026
Jul 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options....Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options. IBM X-Force ID: 253202.Show less
1Ibm
1Db2
Jun 17, 2026
Jul 10, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arb...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184.Show less
1Ibm
1Db2
Jun 17, 2026
Jul 10, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-For...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046.Show less
1Ibm
1Db2
Jun 17, 2026
Jul 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a spec...Show more
IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 249517.Show less