Known vulnerabilities in DB2 Data Management Console on CPD

Vendor: IBM Corporation
Software: DB2 Data Management Console on CPD
Software CPE: cpe:2.3:a:ibm_corporation:db2_data_management_console_on_cpd:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 25
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DB2 Data Management Console on CPD DB2 Data Management Console on CPD is affected by 25 known vulnerabilities: 3 high, 14 medium, 8 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101974 - Deserialization of Untrusted Data
CVE-2024-52046		 CWE-502 High
No
No
 5.1.2 28.12.2024 SB2024122801
SB20250117140
SB2025020549
and 23 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 5.1.2 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 5.1.2 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027		 CWE-502 High
No
No
 4.7.2 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more
#VU74193 - Improper preservation of permissions
CVE-2023-28642		 CWE-281 Medium
No
No
 4.7.2 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 29 more
#VU74190 - Improper Access Control
CVE-2023-27561		 CWE-284 Low
No
No
 4.7.2 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 40 more
#VU74189 - Improper preservation of permissions
CVE-2023-25809		 CWE-281 Low
No
No
 4.7.2 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 23 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 4.7.2 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72320 - Improper Privilege Management
CVE-2023-25173		 CWE-269 Low
No
No
 4.7.2 16.02.2023 SB2023021620
SB2023050808
SB2023051069
and 52 more
#VU72319 - Resource exhaustion
CVE-2023-25153		 CWE-400 Medium
No
No
 4.7.2 16.02.2023 SB2023021620
SB2023051934
SB2023060110
and 30 more
#VU70039 - Resource exhaustion
CVE-2022-23471		 CWE-400 Medium
No
No
 4.7.2 08.12.2022 SB2022120802
SB2022121324
SB2022122112
and 27 more
#VU66857 - UNIX Symbolic Link (Symlink) Following
CVE-2015-3627		 CWE-61 Low
No
No
 4.8 30.08.2022 SB2015051807
SB2022083021
SB2023022316
and 7 more
#VU65006 - Out-of-bounds read
CVE-2021-38561		 CWE-125 Medium
No
No
 5.1.2 07.07.2022 SB2022070736
SB2022070742
SB2022071920
and 41 more
#VU64007 - Resource exhaustion
CVE-2022-31030		 CWE-400 Medium
No
No
 4.7.2 07.06.2022 SB2022060702
SB2022061206
SB2022061326
and 23 more
#VU63090 - Permissions, Privileges, and Access Controls
CVE-2022-29162		 CWE-264 Medium
No
No
 4.7.2 12.05.2022 SB2022051205
SB2022062435
SB2022071158
and 32 more
#VU58522 - Integer overflow
CVE-2021-43784		 CWE-190 Medium
No
No
 4.7.2 06.12.2021 SB2021120604
SB2021121497
SB2021122314
and 11 more
#VU57038 - Incorrect Default Permissions
CVE-2021-41103		 CWE-276 Low
No
No
 4.7.2 04.10.2021 SB2021100406
SB2021100503
SB2021110812
and 21 more
#VU54999 - Permissions, Privileges, and Access Controls
CVE-2021-32760		 CWE-264 Medium
No
No
 4.7.2 20.07.2021 SB2021072005
SB2021072227
SB2021072708
and 17 more
#VU52902 - Improper Validation of Array Index
CVE-2021-3121		 CWE-129 High
No
No
 5.1.2 06.05.2021 SB2021011120
SB2021050602
SB2021050603
and 34 more
#VU25847 - Improper Access Control
CVE-2019-19921		 CWE-284 Low
No
No
 4.7.2 10.03.2020 SB2020021224
SB2020031004
SB2020031116
and 35 more


Showing elements 1 - 20 out of 25