Known vulnerabilities in DB2 Data Management Console - page 3

Vendor: IBM Corporation
Software: DB2 Data Management Console
Software CPE: cpe:2.3:a:ibm_corporation:db2_data_management_console:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 92
Public exploits: 9
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DB2 Data Management Console DB2 Data Management Console is affected by 92 known vulnerabilities: 1 critical, 14 high, 56 medium, 21 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114312 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-48050		 CWE-22 High
No
No
 3.1.13.2 20.08.2025 SB20250820123
SB20250820124
SB20250820125
and 15 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 3.1.13.2 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 63 more
#VU113168 - Embedded Malicious Code
CVE-2025-54313		 CWE-506 Critical
No
Exploited
 3.1.13.2 23.07.2025 SB2025072318
SB2025100722
SB2026012818
#VU108091 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-25977		 CWE-1321 High
No
No
 3.1.13.2 30.04.2025 SB2025043032
SB2025043033
SB2025073179
and 2 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 3.1.13.2 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 46 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 3.1.13.2 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 3.1.13.2 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU98513 - Improper input validation
CVE-2024-48949		 CWE-20 Medium
No
No
 3.1.13.2 14.10.2024 SB2024101490
SB20241014105
SB20241014106
and 25 more
#VU97224 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38816		 CWE-22 Medium
Available
No
 3.1.13.2 12.09.2024 SB2024091290
SB20241014121
SB20241015124
and 24 more
#VU89219 - Observable discrepancy
CVE-2024-30171		 CWE-203 Medium
No
No
 3.1.13.2 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 3.1.13 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 3.1.13.2 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 344 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 3.1.13 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 654 more
#VU72247 - Improper input validation
CVE-2022-38900		 CWE-20 Medium
No
No
 3.1.13.2 15.02.2023 SB2023021531
SB2023022714
SB2023032315
and 35 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 3.1.13 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70123 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-37601		 CWE-94 High
No
No
 3.1.13.2 12.12.2022 SB2022121220
SB2023010419
SB2023011403
and 20 more
#VU70122 - Incorrect Regular Expression
CVE-2022-37599		 CWE-185 Medium
No
No
 3.1.13.2 12.12.2022 SB2022121221
SB2023010424
SB2023020920
and 19 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987		 CWE-601 Medium
No
No
 3.1.13.2 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565		 CWE-532 Low
No
No
 3.1.13 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250		 CWE-256 Low
No
No
 3.1.13 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more


Showing elements 41 - 60 out of 92