Known vulnerabilities in DB2 Data Management Console - page 3

Vendor: IBM Corporation
Software: DB2 Data Management Console
Software CPE: cpe:2.3:a:ibm_corporation:db2_data_management_console:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 92
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DB2 Data Management Console DB2 Data Management Console is affected by 92 known vulnerabilities: 1 critical, 14 high, 56 medium, 21 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 3.1.13.2 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 3.1.13.2 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU114312 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-48050		 CWE-22 High
No
No
 3.1.13.2 20.08.2025 SB20250820123
SB20250820124
SB20250820125
and 15 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 3.1.13.2 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU113168 - Embedded Malicious Code
CVE-2025-54313		 CWE-506 Critical
No
Exploited
 3.1.13.2 23.07.2025 SB2025072318
SB2025100722
SB2026012818
#VU109251 - Security Features
CVE-2025-22233		 CWE-254 Low
No
No
 3.1.13.2 16.05.2025 SB2025051612
SB2025060628
SB2025062507
and 20 more
#VU99563 - Improper Verification of Cryptographic Signature
CVE-2024-48948		 CWE-347 Low
No
No
 3.1.13.2 31.10.2024 SB2024103162
SB2024103166
SB2024110115
and 18 more
#VU98795 - Security Features
CVE-2024-38820		 CWE-254 Medium
No
No
 3.1.13.2 17.10.2024 SB2024101781
SB2024112618
SB2024120428
and 40 more
#VU97224 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38816		 CWE-22 Medium
Available
No
 3.1.13.2 12.09.2024 SB2024091290
SB20241014121
SB20241015124
and 24 more
#VU96018 - Improper input validation
CVE-2024-38809		 CWE-20 Medium
No
No
 3.1.13.2 14.08.2024 SB2024081479
SB2024091920
SB2024100804
and 26 more
#VU89219 - Observable discrepancy
CVE-2024-30171		 CWE-203 Medium
No
No
 3.1.13.2 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 3.1.13 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 3.1.13.2 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 3.1.13.2 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU72247 - Improper input validation
CVE-2022-38900		 CWE-20 Medium
No
No
 3.1.13.2 15.02.2023 SB2023021531
SB2023022714
SB2023032315
and 35 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175		 CWE-94 Medium
No
No
 3.1.13 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 44 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 3.1.13 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565		 CWE-532 Low
No
No
 3.1.13 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU62314 - Security Features
CVE-2022-22968		 CWE-254 Medium
Available
No
 3.1.13.2 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250		 CWE-256 Low
No
No
 3.1.13 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more


Showing elements 41 - 60 out of 92