IBM Db2 vulnerabilities, page 5

360 vulnerabilities

Known vulnerabilities in IBM Db2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3MediumCVE-2025-1493ibm · db2 +1 moreIBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources.EPSS0.37%6.5MediumCVE-2025-1000ibm · db2 +1 moreIBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when connecting to a z/OS database due to improper handling of automatic client rerouting.EPSS0.39%6.5MediumCVE-2025-1992ibm · db2 +1 moreIBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to cause a denial of service due to insufficient release of allocated memory after usage.EPSS0.38%6.5MediumCVE-2025-0915ibm · db2 +1 moreIBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated user to cause a denial of service due to insufficient release of allocated memory resources.EPSS0.40%6.5MediumCVE-2025-14689ibm · db2 +1 moreIBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects.EPSS0.28%5.3MediumCVE-2025-14688ibm · db2IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurationsIBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when certain configurations exist.EPSS0.22%6.5MediumCVE-2025-36407ubuntu · linux +158 moreIBM Db2 Denial of ServiceIBM® Db2® is vulnerable to a denial of service with a specially crafted query that uses ALTER TABLE operations.EPSS0.31%6.5MediumCVE-2025-36424ubuntu · linux +158 moreIBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to improper neutralization of special elements in data query logic.EPSS0.37%6.5MediumCVE-2025-36372ibm · db2IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tablesIBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.EPSS0.30%6.5MediumCVE-2025-36009ubuntu · linux +158 moreIBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service due to excessive use of a global variable.EPSS0.39%7.5HighCVE-2025-36071ibm · db2 +1 moreIBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources.EPSS0.33%5.3MediumCVE-2025-36428ubuntu · linux +158 moreIBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when the RPSCAN feature is enabled.EPSS0.34%8.4HighCVE-2025-36384ibm · db2 +1 moreIBM Db2 Privilege EscalationIBM Db2 for Windows 12.1.0 - 12.1.3 could allow a local user with filesystem access to escalate their privileges due to the use of an unquoted search path element.EPSS0.18%6.5MediumCVE-2025-36006ibm · db2IBM Db2 denial of serviceIBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial due to the improper release of resources after use.EPSS0.31%6.5MediumCVE-2025-36387ubuntu · linux +158 moreIBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 - 11.5.9 could allow an authenticated user to cause a denial of service when given specially crafted query.EPSS0.37%6.2MediumCVE-2025-36123ubuntu · linux +158 moreIBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a local user to cause a denial of service when copying large table containing XML data due to improper allocation of system resources.EPSS0.15%6.5MediumCVE-2025-36098ubuntu · linux +158 moreIBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper allocation of resources.EPSS0.39%7.5HighCVE-2025-36442ubuntu · linux +158 moreIBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query with XML columns.EPSS0.44%8.2HighCVE-2025-36247ibm · db2 +1 moreIBM Db2 XML External Entity ReferenceIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.EPSS0.35%6.5MediumCVE-2025-36001ubuntu · linux +158 moreIBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service using a specially crafted SQL statement including XML that performs uncontrolled recursion.EPSS0.39%