Known vulnerabilities in Db2 Developer Extension - page 2

Vendor: IBM Corporation
Software: Db2 Developer Extension
Software CPE: cpe:2.3:a:ibm_corporation:db2_developer_extension:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 58
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Db2 Developer Extension Db2 Developer Extension is affected by 58 known vulnerabilities: 3 high, 37 medium, 18 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146415 - Improper input validation
CVE-2026-41854		 CWE-20 Low
No
No
 1.2.0 31.08.2026 SB20260828154
SB20260917195
SB20260919172
#VU146411 - Improper input validation
CVE-2026-41853		 CWE-20 Medium
No
No
 1.2.0 31.08.2026 SB20260828154
SB20260917195
SB20260919172
#VU146408 - Inefficient Regular Expression Complexity
CVE-2026-41848		 CWE-1333 Low
No
No
 1.2.0 31.08.2026 SB20260828154
SB2026090334
SB20260919171
#VU146174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41845		 CWE-79 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB2026083181
SB2026083182
and 3 more
#VU146171 - Session Fixation
CVE-2026-41839		 CWE-384 Low
No
No
 1.2.0 28.08.2026 SB20260828154
SB20260917195
SB20260919172
and 1 more
#VU146166 - Missing release of memory after effective lifetime
CVE-2026-41840		 CWE-401 Medium
No
No
 1.2.0 28.08.2026 SB20260828154
SB20260917195
SB20260919172
and 1 more
#VU140706 - Allocation of Resources Without Limits or Throttling
CVE-2026-14257		 CWE-770 Medium
No
No
 1.2.0 01.08.2026 SB2026080124
SB2026083142
SB2026083146
and 10 more
#VU135820 - Inefficient Algorithmic Complexity
CVE-2026-13149		 CWE-407 Medium
No
No
 1.2.0 29.06.2026 SB20260629111
SB2026072843
SB2026072877
and 19 more
#VU134322 - Improper Certificate Validation
CVE-2026-40992		 CWE-295 Medium
No
No
 1.2.0 11.06.2026 SB2026061136
SB2026073114
SB20260919174
#VU134321 - Insecure Temporary File
CVE-2026-41001		 CWE-377 Low
No
No
 1.2.0 11.06.2026 SB2026061136
SB2026073114
SB20260919174
#VU128235 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-40977		 CWE-59 Low
No
No
 1.1.2 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 3 more
#VU128234 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-40975		 CWE-338 Medium
No
No
 1.1.2 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 4 more
#VU128232 - Improper Access Control
CVE-2026-40973		 CWE-284 Low
No
No
 1.1.2 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 3 more
#VU128231 - Information Exposure Through Timing Discrepancy
CVE-2026-40972		 CWE-208 Medium
No
No
 1.1.2 27.04.2026 SB20260427182
SB2026052513
SB2026091421
#VU126709 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-22741		 CWE-349 Low
No
No
 1.1.2 21.04.2026 SB2026042162
SB2026052514
SB20260528259
and 4 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145		 CWE-295 Low
No
No
 1.1.2 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 18 more
#VU125741 - Configuration
CVE-2026-29129		 CWE-16 Medium
No
No
 1.1.2 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 13 more
#VU125742 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-25854		 CWE-601 Low
No
No
 1.1.2 09.04.2026 SB20260409109
SB2026041565
SB20260417131
and 15 more
#VU125738 - Improper input validation
CVE-2026-32990		 CWE-20 Medium
No
No
 1.1.2 09.04.2026 SB20260409109
SB20260417131
SB2026042329
and 16 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146		 CWE-327 Medium
No
No
 1.1.2 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 29 more


Showing elements 21 - 40 out of 58