Known vulnerabilities in Db2 Big SQL

Vendor: IBM Corporation
Software: Db2 Big SQL
Software CPE: cpe:2.3:a:ibm_corporation:db2_big_sql:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 195
Public exploits: 14
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Db2 Big SQL Db2 Big SQL is affected by 195 known vulnerabilities: 1 critical, 25 high, 107 medium, 62 low Critical High Medium Low

Vulnerabilities (195)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718		 CWE-918 High
No
No
 8.3.1 patch 4 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 29 more
#VU124825 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-29063		 CWE-1321 Medium
No
No
 8.3.1 patch 4 02.04.2026 SB2026040246
SB2026040612
SB2026040627
and 32 more
#VU123997 - Improper input validation
CVE-2026-2391		 CWE-20 Medium
No
No
 8.3.1 patch 4 13.03.2026 SB2026031335
SB2026031336
SB2026032417
and 13 more
#VU123140 - Inefficient Regular Expression Complexity
CVE-2026-26996		 CWE-1333 Medium
No
No
 8.3.1 patch 4 23.02.2026 SB2026022345
SB2026030633
SB2026032328
and 33 more
#VU122747 - Improper input validation
CVE-2025-13867		 CWE-20 Medium
No
No
 8.3.1 patch 4 12.02.2026 SB2026021208
SB2026021211
SB2026021216
and 5 more
#VU122746 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2025-14689		 CWE-943 Medium
No
No
 8.3.1 patch 4 12.02.2026 SB2026021207
SB2026021213
SB2026021215
and 5 more
#VU122744 - Unprotected Storage of Credentials
CVE-2025-36425		 CWE-256 Low
No
No
 8.3.1 patch 4 12.02.2026 SB2026021205
SB2026022012
SB2026030931
and 3 more
#VU122743 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-36247		 CWE-611 Medium
No
No
 8.3.1 patch 4 12.02.2026 SB2026021204
SB2026022012
SB2026030931
and 3 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639		 CWE-754 Medium
Available
No
 8.3.1 patch 4 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 23 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 8.3.1 patch 4 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 69 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 8.3.1 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 38 more
#VU84374 - Resource exhaustion
CVE-2023-40687		 CWE-400 Medium
No
No
 7.6.2 13.12.2023 SB2023121309
SB2024032815
SB2024040818
and 10 more
#VU84368 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38727		 CWE-89 Medium
No
No
 7.6.2 13.12.2023 SB2023121302
SB2024032815
SB2024040818
and 10 more
#VU84102 - Resource exhaustion
CVE-2023-40692		 CWE-400 Medium
No
No
 7.6.2 12.12.2023 SB2023121236
SB2024032815
SB2024040818
and 11 more
#VU84101 - Resource exhaustion
CVE-2023-43020		 CWE-400 Low
No
No
 7.6.2 12.12.2023 SB2023121237
SB2024032815
SB2024040818
and 10 more
#VU84099 - Improper Access Control
CVE-2023-38003		 CWE-284 Low
No
No
 7.6.2 12.12.2023 SB2023121230
SB2024032815
SB2024040818
and 10 more
#VU84043 - Double Free
CVE-2002-0059		 CWE-415 Medium
No
No
 7.6.2 11.12.2023 SB2023121128
SB2024032815
SB2024040818
and 10 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 7.6.2 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 7.6.2 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 7.6.2 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more


Showing elements 1 - 20 out of 195