Known vulnerabilities in Db2 Big SQL - page 9

Vendor: IBM Corporation
Software: Db2 Big SQL
Software CPE: cpe:2.3:a:ibm_corporation:db2_big_sql:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 195
Public exploits: 14
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Db2 Big SQL Db2 Big SQL is affected by 195 known vulnerabilities: 1 critical, 25 high, 107 medium, 62 low Critical High Medium Low

Vulnerabilities (195)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101083 - Insufficient Session Expiration
CVE-2024-35160		 CWE-613 Low
No
No
 7.7.0 02.12.2024 SB2024120221
SB2024120224
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 7.8 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU96731 - Improper Certificate Validation
CVE-2024-39689		 CWE-295 High
No
No
 7.7.3 03.09.2024 SB2024090358
SB2024090359
SB2024090440
and 50 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 - 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU85784 - Improper input validation
CVE-2023-47158		 CWE-20 Low
No
No
 7.6.4 25.01.2024 SB2024012503
SB2024012510
SB2024012616
and 11 more
#VU85782 - Improper input validation
CVE-2023-47747		 CWE-20 Low
No
No
 7.6.4 25.01.2024 SB2024012503
SB2024012510
SB2024012616
and 11 more
#VU85760 - Improper input validation
CVE-2023-47746		 CWE-20 Low
No
No
 7.6.4 24.01.2024 SB2024012503
SB2024012510
SB2024012616
and 11 more
#VU85759 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-47152		 CWE-327 Medium
No
No
 7.6.4 24.01.2024 SB2024012503
SB2024012510
SB2024012616
and 13 more
#VU85748 - Improper input validation
CVE-2023-47141		 CWE-20 Low
No
No
 7.6.4 24.01.2024 SB2024012503
SB2024012510
SB2024012616
and 11 more
#VU85745 - Improper input validation
CVE-2023-50308		 CWE-20 Low
No
No
 7.6.4 24.01.2024 SB2024012503
SB2024012510
SB2024012616
and 11 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 7.6.2 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU85128 - Resource exhaustion
CVE-2023-45193		 CWE-400 Medium
No
No
 7.6.4 09.01.2024 SB2024010913
SB2024012503
SB2024012510
and 11 more
#VU85127 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-27859		 CWE-94 Medium
No
No
 7.6.4 09.01.2024 SB2024010911
SB2024012503
SB2024012510
and 12 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 7.6.2 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72060 - Information Exposure Through Log Files
CVE-2022-43930		 CWE-532 Low
No
No
 7.5 08.02.2023 SB2023020862
SB2023032013
SB2023060713
and 6 more
#VU72059 - Improper Privilege Management
CVE-2022-43927		 CWE-269 Low
No
No
 7.5 08.02.2023 SB2023020862
SB2023032013
SB2023060713
and 7 more
#VU72058 - Resource exhaustion
CVE-2022-43929		 CWE-400 Low
No
No
 7.5 08.02.2023 SB2023020862
SB2023032013
SB2023060713
and 7 more
#VU68896 - Memory corruption
CVE-2022-3786		 CWE-119 Medium
Available
No
 7.4.2 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 44 more
#VU68895 - Memory corruption
CVE-2022-3602		 CWE-119 High
Available
No
 7.4.2 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 45 more
#VU57150 - Improper Certificate Validation
CVE-2014-3577		 CWE-295 Low
No
No
 7.5 08.10.2021 SB2014082106
SB2021100807
SB2023020872
and 24 more


Showing elements 161 - 180 out of 195