Known vulnerabilities in DB2 Data Management Console - page 2

Vendor: IBM Corporation
Software: DB2 Data Management Console
Software CPE: cpe:2.3:a:ibm_corporation:db2_data_management_console:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 92
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DB2 Data Management Console DB2 Data Management Console is affected by 92 known vulnerabilities: 1 critical, 14 high, 56 medium, 21 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 3.1.13.2 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU108091 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-25977		 CWE-1321 High
No
No
 3.1.13.2 30.04.2025 SB2025043032
SB2025043033
SB2025073179
and 2 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Available
No
 3.1.13.2 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 3.1.13.2 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 45 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 3.1.13.2 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26791		 CWE-79 Low
No
No
 3.1.13.2 17.03.2025 SB2025031740
SB2025031741
SB2025031771
and 35 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 3.1.13.2 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 3.1.13.2 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU101868 - Resource exhaustion
CVE-2024-45338		 CWE-400 Medium
No
No
 3.1.13.2 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU100680 - Improper input validation
CVE-2024-38828		 CWE-20 Medium
No
No
 3.1.13.2 20.11.2024 SB2024112009
SB2025021262
SB2025040424
and 16 more
#VU98513 - Improper input validation
CVE-2024-48949		 CWE-20 Medium
No
No
 3.1.13.2 14.10.2024 SB2024101490
SB20241014105
SB20241014106
and 25 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 3.1.13.2 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 3.1.13.2 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 3.1.13.2 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 3.1.13.2 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU80323 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-26136		 CWE-1321 High
No
No
 3.1.13.2 04.09.2023 SB2023090411
SB2023090423
SB2023090816
and 42 more
#VU70123 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-37601		 CWE-94 High
No
No
 3.1.13.2 12.12.2022 SB2022121220
SB2023010419
SB2023011403
and 20 more
#VU70122 - Incorrect Regular Expression
CVE-2022-37599		 CWE-185 Medium
No
No
 3.1.13.2 12.12.2022 SB2022121221
SB2023010424
SB2023020920
and 19 more
#VU67974 - Incorrect Regular Expression
CVE-2022-25858		 CWE-185 Medium
No
No
 3.1.13.2 06.10.2022 SB2022100649
SB2022100650
SB2022110245
and 8 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987		 CWE-601 Medium
No
No
 3.1.13.2 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more


Showing elements 21 - 40 out of 92