Known vulnerabilities in Db2 Developer Extension

Vendor: IBM Corporation
Software: Db2 Developer Extension
Software CPE: cpe:2.3:a:ibm_corporation:db2_developer_extension:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 58
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Db2 Developer Extension Db2 Developer Extension is affected by 58 known vulnerabilities: 3 high, 37 medium, 18 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146413 - Allocation of Resources Without Limits or Throttling
CVE-2026-41850		 CWE-770 Medium
No
No
 1.2.0 31.08.2026 SB20260828154
SB2026083172
SB2026083181
and 1 more
#VU146412 - Protection Mechanism Failure
CVE-2026-41852		 CWE-693 Low
No
No
 1.2.0 31.08.2026 SB20260828154
SB2026092114
#VU146410 - Resource exhaustion
CVE-2026-41851		 CWE-400 Medium
No
No
 1.2.0 31.08.2026 SB20260828154
SB2026083172
SB2026083181
and 1 more
#VU146176 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41846		 CWE-79 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026092115
#VU146173 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41843		 CWE-22 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026092115
#VU146172 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-41844		 CWE-601 Low
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026092115
#VU146170 - Resource exhaustion
CVE-2026-41842		 CWE-400 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026083172
SB2026083181
and 3 more
#VU146169 - Improper Access Control
CVE-2026-41841		 CWE-284 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB20260917195
SB2026092115
#VU139152 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-59888		 CWE-915 Medium
No
No
 1.2.0 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 8 more
#VU139151 - Incorrect Authorization
CVE-2026-59889		 CWE-863 Low
No
No
 1.2.0 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 8 more
#VU138926 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-12143		 CWE-93 High
No
No
 1.2.0 21.07.2026 SB20260721116
SB2026072414
SB2026072616
and 20 more
#VU137407 - Insufficient Technical Documentation
CVE-2026-59084		 CWE-1059 Low
No
No
 1.2.0 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 12 more
#VU137408 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-59083		 CWE-180 Medium
No
No
 1.2.0 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 13 more
#VU135706 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0540		 CWE-79 Medium
No
No
 1.2.0 29.06.2026 SB2026062916
SB2026062922
SB2026081810
and 3 more
#VU132386 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49978		 CWE-79 Medium
No
No
 1.2.0 27.05.2026 SB2026052785
SB20260731138
SB2026083170
and 1 more
#VU132356 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49459		 CWE-79 Medium
No
No
 1.2.0 27.05.2026 SB2026052729
SB20260919177
#VU132355 - Improper input validation
CVE-2026-49458		 CWE-20 Medium
No
No
 1.2.0 27.05.2026 SB2026052729
SB20260919177
#VU126561 - Permissive List of Allowed Inputs
CVE-2026-41240		 CWE-183 Low
No
No
 1.2.0 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 11 more
#VU126560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41239		 CWE-79 Medium
No
No
 1.2.0 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 7 more
#VU126559 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-41238		 CWE-1321 Medium
No
No
 1.2.0 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 6 more


Showing elements 1 - 20 out of 58