Known vulnerabilities in DB2 Query Management Facility

Vendor: IBM Corporation
Software: DB2 Query Management Facility
Software CPE: cpe:2.3:a:ibm_corporation:db2_query_management_facility:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 34
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DB2 Query Management Facility DB2 Query Management Facility is affected by 34 known vulnerabilities: 1 high, 19 medium, 14 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130954 - Out-of-bounds read
CVE-2026-6918		 CWE-125 Medium
No
No
 - 11.05.2026 SB2026051152
SB20260528261
SB2026060168
and 10 more
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 71 more
#VU126759 - Improper input validation
CVE-2026-34282		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 31 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 72 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 70 more
#VU126763 - Improper input validation
CVE-2026-22008		 CWE-20 Low
No
No
 - 22.04.2026 SB20260422123
SB2026050683
SB20260513117
and 15 more
#VU126764 - Improper input validation
CVE-2026-22018		 CWE-20 Low
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 70 more
#VU126765 - Improper input validation
CVE-2026-22007		 CWE-20 Low
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 70 more
#VU126766 - Improper input validation
CVE-2026-34268		 CWE-20 Low
No
No
 - 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 70 more
#VU123884 - Integer overflow
CVE-2026-23865		 CWE-190 Medium
No
No
 - 11.03.2026 SB2026031140
SB2026031141
SB2026031523
and 45 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU112132 - Stack-based buffer overflow
CVE-2025-4447		 CWE-121 Medium
No
No
 - 03.07.2025 SB2025070315
SB2025070316
SB2025070319
and 54 more
#VU112130 - Heap-based Buffer Overflow
CVE-2025-2900		 CWE-122 High
No
No
 - 03.07.2025 SB2025070313
SB2025070316
SB2025070318
and 22 more
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 - 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 - 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 - 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 - 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 - 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 - 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more


Showing elements 1 - 20 out of 34