← Back

Db2

db2

Vendor: Ibm • 339 CVEs

CVEs (339)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query w...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query with XML columns.Show less
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in d...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when the RPSCAN feature is enabled.Show less
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to insufficient validation of special elements in data query logic.
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to improper neutralization of special elements in data query logic.
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 - 12.1.3 could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic.
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM® Db2® is vulnerable to a denial of service with a specially crafted query that uses ALTER TABLE operations.
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 - 11.5.9 could allow an authenticated user to cause a denial of service when given specially crafted query.
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
IBM Db2 for Windows 12.1.0 - 12.1.3 could allow a local user with filesystem access to escalate their privileges due to the use of an unquoted search path element.
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service by executing a query that invokes the JSON_Object scalar function, which may trigger an unhandled exceptio...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service by executing a query that invokes the JSON_Object scalar function, which may trigger an unhandled exception leading to abnormal server termination.Show less
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 under specific configuration of cataloged remote storage aliases could allow an authenticated user to execute unauthor...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 under specific configuration of cataloged remote storage aliases could allow an authenticated user to execute unauthorized commands due to an authorization bypass vulnerability using a user-controlled key.Show less
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a local user to cause a denial of service due to improper neutralization of special elements in data query...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic.Show less
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
7.2 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 could allow an instance owner to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 could allow an instance owner to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges operated at a higher than minimum level.Show less
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a local user to cause a denial of service when copying large table containing XML data due to improper all...Show more
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a local user to cause a denial of service when copying large table containing XML data due to improper allocation of system resources.Show less
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper allocation of resources.
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as a trap may occur when selecting from certain types of tables.
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service due to excessive use of a global variable.
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service using a specially crafted SQL statement including XML t...Show more
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service using a specially crafted SQL statement including XML that performs uncontrolled recursion.Show less
1Ibm
1Db2
Jun 17, 2026
Jan 30, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 is vulnerable to a denial of service as the server may crash when an authenticated user creates a specially crafted query.
1Ibm
1Db2
Jun 17, 2026
Nov 7, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations could allow a local user to execute malicious code that escalate their privileges to root due to execu...Show more
IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations could allow a local user to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges operated at a higher than minimum level.Show less
1Ibm
1Db2
Jun 17, 2026
Nov 7, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic.