Known vulnerabilities in Db2 Big SQL - page 5

Vendor: IBM Corporation
Software: Db2 Big SQL
Software CPE: cpe:2.3:a:ibm_corporation:db2_big_sql:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 195
Public exploits: 14
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Db2 Big SQL Db2 Big SQL is affected by 195 known vulnerabilities: 1 critical, 25 high, 107 medium, 62 low Critical High Medium Low

Vulnerabilities (195)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 8.2.2 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 8.2 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 8.2 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 95 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Available
No
 8.2 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 8.2.1 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 45 more
#VU104172 - Uncontrolled Memory Allocation
CVE-2024-45663		 CWE-789 Medium
No
No
 8.2 25.02.2025 SB2025022520
SB2025022521
SB2025031921
and 6 more
#VU104124 - Allocation of Resources Without Limits or Throttling
CVE-2024-41762		 CWE-770 Medium
No
No
 8.2 21.02.2025 SB2025022118
SB2025022521
SB2025031921
and 6 more
#VU104123 - Allocation of Resources Without Limits or Throttling
CVE-2024-41761		 CWE-770 Low
No
No
 8.2 21.02.2025 SB2025022117
SB2025022521
SB2025031921
and 6 more
#VU104121 - Information Exposure Through Log Files
CVE-2024-40679		 CWE-532 Low
No
No
 8.2 21.02.2025 SB2025022116
SB2025022521
SB2025031921
and 7 more
#VU104120 - Uncontrolled Memory Allocation
CVE-2024-37071		 CWE-789 Low
No
No
 8.2 21.02.2025 SB2025022115
SB2025022521
SB2025031921
and 6 more
#VU98433 - Uncontrolled Memory Allocation
CVE-2024-35152		 CWE-789 Low
No
No
 7.6.8, 7.7.3 14.10.2024 SB2024101403
SB2024101427
SB2024102434
and 7 more
#VU98432 - Uncontrolled Memory Allocation
CVE-2024-37529		 CWE-789 Low
No
No
 7.6.8, 7.7.3 14.10.2024 SB2024101402
SB2024101427
SB2024102434
and 7 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 7.8 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 7.8 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU96716 - Incorrect Regular Expression
CVE-2024-39249		 CWE-185 Medium
No
No
 7.8.2 03.09.2024 SB2024090325
SB2024090326
SB2024090359
and 20 more
#VU94727 - Allocation of Resources Without Limits or Throttling
CVE-2024-31881		 CWE-770 Low
No
No
 7.6.8 25.07.2024 SB2024072510
SB2024072902
SB2024073008
and 10 more
#VU94694 - Resource exhaustion
CVE-2024-31880		 CWE-400 Low
No
No
 7.6.8 24.07.2024 SB2024072411
SB2024072902
SB2024073008
and 10 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 7.6.8, 7.7.3 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041		 CWE-601 Medium
No
No
 7.8 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 7.6.8 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more


Showing elements 81 - 100 out of 195