Known vulnerabilities in Db2 Developer Extension

Vendor: IBM Corporation
Software: Db2 Developer Extension
Software CPE: cpe:2.3:a:ibm_corporation:db2_developer_extension:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 61
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Db2 Developer Extension Db2 Developer Extension is affected by 61 known vulnerabilities: 3 high, 40 medium, 18 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146413 - Allocation of Resources Without Limits or Throttling
CVE-2026-41850		 CWE-770 Medium
No
No
 1.2.0 31.08.2026 SB20260828154
SB2026083172
SB2026083181
and 1 more
#VU146412 - Protection Mechanism Failure
CVE-2026-41852		 CWE-693 Low
No
No
 1.2.0 31.08.2026 SB20260828154
SB2026092114
#VU146410 - Resource exhaustion
CVE-2026-41851		 CWE-400 Medium
No
No
 1.2.0 31.08.2026 SB20260828154
SB2026083172
SB2026083181
and 1 more
#VU146176 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41846		 CWE-79 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026092115
#VU146174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41845		 CWE-79 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026083181
SB2026083182
and 3 more
#VU146173 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41843		 CWE-22 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026092115
#VU146172 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-41844		 CWE-601 Low
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026092115
#VU146171 - Session Fixation
CVE-2026-41839		 CWE-384 Low
No
No
 1.2.0 28.08.2026 SB20260828154
SB20260917195
SB20260919172
and 1 more
#VU146170 - Resource exhaustion
CVE-2026-41842		 CWE-400 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026083172
SB2026083181
and 3 more
#VU146169 - Improper Access Control
CVE-2026-41841		 CWE-284 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB20260917195
SB2026092115
#VU146166 - Missing release of memory after effective lifetime
CVE-2026-41840		 CWE-401 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB20260917195
SB20260919172
and 1 more
#VU139152 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-59888		 CWE-915 Medium
No
No
 1.2.0 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 10 more
#VU139151 - Incorrect Authorization
CVE-2026-59889		 CWE-863 Low
No
No
 1.2.0 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 10 more
#VU137407 - Insufficient Technical Documentation
CVE-2026-59084		 CWE-1059 Low
No
No
 1.2.0 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 12 more
#VU137408 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-59083		 CWE-180 Medium
No
No
 1.2.0 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 13 more
#VU134322 - Improper Certificate Validation
CVE-2026-40992		 CWE-295 Medium
No
No
 1.2.0 11.06.2026 SB2026061136
SB2026073114
SB20260919174
#VU134321 - Insecure Temporary File
CVE-2026-41001		 CWE-377 Low
No
No
 1.2.0 11.06.2026 SB2026061136
SB2026073114
SB20260919174
#VU132386 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49978		 CWE-79 Medium
No
No
 1.2.0 27.05.2026 SB2026052785
SB20260731138
SB2026083170
and 1 more
#VU132356 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49459		 CWE-79 Medium
No
No
 1.2.0 27.05.2026 SB2026052729
SB20260919177
#VU132355 - Improper input validation
CVE-2026-49458		 CWE-20 Medium
No
No
 1.2.0 27.05.2026 SB2026052729
SB20260919177


Showing elements 1 - 20 out of 61