Known vulnerabilities in IBM DB2 9.7

Software: IBM DB2
Version: 9.7
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM DB2 version 9.7 IBM DB2 9.7 is affected by 24 vulnerabilities: 3 high, 3 medium, 18 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69507 - Improper Privilege Management
CVE-2022-22483
CWE-269 Low
No
No
11.5.8 22.11.2022 SB2022112251
SB2023012308
#VU64650 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22390
CWE-200 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7, 11.5.7 24.06.2022 SB2022062419
SB2022082224
SB2023040617
#VU64634 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-22389
CWE-89 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7, 11.5.7 24.06.2022 SB2022062405
SB2022082224
SB2023040617
#VU60739 - Integer overflow
CVE-2022-25315
CWE-190 High
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313
CWE-121 High
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235
CWE-94 High
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236
CWE-20 Medium
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU58798 - Permissions, Privileges, and Access Controls
CVE-2021-20373
CWE-264 Medium
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58796 - Incorrect Default Permissions
CVE-2020-4976
CWE-276 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58794 - Permissions, Privileges, and Access Controls
CVE-2021-38926
CWE-264 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU15922 - UNIX Symbolic Link (Symlink) Following
CVE-2018-1834
CWE-61 Low
No
No
- 16.11.2018 SB2018111602
#VU15921 - UNIX Symbolic Link (Symlink) Following
CVE-2018-1799
CWE-61 Low
No
No
- 16.11.2018 SB2018111602
#VU15920 - UNIX Symbolic Link (Symlink) Following
CVE-2018-1781
CWE-61 Low
No
No
- 16.11.2018 SB2018111602
#VU15906 - Uncontrolled Search Path Element
CVE-2018-1802
CWE-427 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.10, 11.1.3.3 iFix002 12.11.2018 SB2018111504
#VU15919 - UNIX Symbolic Link (Symlink) Following
CVE-2018-1780
CWE-61 Low
No
No
- 12.11.2018 SB2018111602
#VU13593 - Deserialization of Untrusted Data
CVE-2017-1677
CWE-502 Low
No
No
- 06.07.2018 SB2018070607
#VU8233 - Command injection
CVE-2017-1520
CWE-77 Low
No
No
- 12.09.2017 SB2017091201
#VU8216 - Permissions, Privileges, and Access Controls
CVE-2017-1451
CWE-264 Low
No
No
- 11.09.2017 SB2017091103
#VU8215 - Permissions, Privileges, and Access Controls
CVE-2017-1439
CWE-264 Low
No
No
- 11.09.2017 SB2017091103


Showing elements 1 - 20 out of 24