Known vulnerabilities in Db2 Developer Extension

Vendor: IBM Corporation
Software: Db2 Developer Extension
Software CPE: cpe:2.3:a:ibm_corporation:db2_developer_extension:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Db2 Developer Extension Db2 Developer Extension is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128400 - Improper Output Neutralization for Logs
CVE-2026-34478		 CWE-117 Medium
No
No
 1.1.2 28.04.2026 SB20260428217
SB2026052632
SB2026052731
and 14 more
#VU128399 - Improper Certificate Validation
CVE-2026-34477		 CWE-295 Medium
No
No
 1.1.2 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 17 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 98 more