← Back

Db2

db2

Vendor: Ibm • 326 CVEs

CVEs (326)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-43927
1Ibm
1Db2
Nov 21, 2024
Feb 17, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used. IBM X-Force ID: 241671.
CVE-2022-41296
1Ibm
2Db2
Db2 Warehouse
Feb 25, 2026
Dec 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237210.
CVE-2022-35637
1Ibm
1Db2
Nov 21, 2024
Sep 13, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL statement into the Db2expln tool. IBM X-Force ID: 230823.
CVE-2022-22483
1Ibm
1Db2
Nov 21, 2024
Sep 13, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE c...Show more
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979.Show less
CVE-2022-22390
1Ibm
1Db2
Nov 21, 2024
Jun 24, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973.
CVE-2022-22389
1Ibm
1Db2
Nov 21, 2024
Jun 24, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnormally when executing specially crafted SQL statements by an authenticated user. IB...Show more
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnormally when executing specially crafted SQL statements by an authenticated user. IBM X-Force ID: 2219740.Show less
CVE-2021-39002
2Ibm
Netapp
2Db2
Oncommand Insight
Nov 21, 2024
Dec 9, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2021-38931
2Ibm
Netapp
2Db2
Oncommand Insight
Nov 21, 2024
Dec 9, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not author...Show more
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418.Show less
CVE-2021-38926
2Ibm
Netapp
2Db2
Oncommand Insight
Nov 21, 2024
Dec 9, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 210...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 210321.Show less
CVE-2021-29678
2Ibm
Netapp
2Db2
Oncommand Insight
Nov 21, 2024
Dec 9, 2021
N/A· v4
8.7 HIGH· v3
5.5 MEDIUM· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914.
CVE-2021-20373
1Ibm
1Db2
Nov 21, 2024
Dec 9, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. IBM X-Force ID:...Show more
IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. IBM X-Force ID: 199521.Show less
CVE-2021-29825
1Ibm
1Db2
Nov 21, 2024
Sep 16, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force ID: 204470.
CVE-2021-29763
1Ibm
1Db2
Nov 21, 2024
Sep 16, 2021
N/A· v4
5.1 MEDIUM· v3
1.9 LOW· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and ca...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. IBM X-Force ID: 202267.Show less
CVE-2021-29752
1Ibm
1Db2
Nov 21, 2024
Sep 16, 2021
N/A· v4
4.4 MEDIUM· v3
3.5 LOW· v2
IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780.
CVE-2021-29777
1Ibm
1Db2
Nov 21, 2024
Jun 24, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in another session, could allow an authenticate...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in another session, could allow an authenticated user to cause a denial of srevice IBM X-Force ID: 203031.Show less
CVE-2021-29703
1Ibm
1Db2
Nov 21, 2024
Jun 24, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200659.
CVE-2021-20579
1Ibm
1Db2
Nov 21, 2024
Jun 24, 2021
N/A· v4
6.5 MEDIUM· v3
3.5 LOW· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create a view or inline SQL function to obtain sensitive information when AUTO_REVAL is set to...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create a view or inline SQL function to obtain sensitive information when AUTO_REVAL is set to DEFFERED_FORCE. IBM X-Force ID: 199283.Show less
CVE-2020-4945
1Ibm
1Db2
Nov 21, 2024
Jun 24, 2021
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbirary files due to improper group permissions. IBM X-Force ID: 191945.
CVE-2020-4885
1Ibm
1Db2
Nov 21, 2024
Jun 24, 2021
N/A· v4
4.7 MEDIUM· v3
1.9 LOW· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to access and change the configuration of Db2 due to a race condition of a symbolic link,. IBM X-Force ID: 190909.
CVE-2021-29702
1Ibm
1Db2
Nov 21, 2024
Jun 16, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID...Show more
Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200658.Show less