Known vulnerabilities in DB2 Warehouse on Cloud Pak for Data

Vendor: IBM Corporation
Software: DB2 Warehouse on Cloud Pak for Data
Software CPE: cpe:2.3:a:ibm_corporation:db2_warehouse_on_cloud_pak_for_data:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 301
Public exploits: 29
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DB2 Warehouse on Cloud Pak for Data DB2 Warehouse on Cloud Pak for Data is affected by 301 known vulnerabilities: 61 high, 149 medium, 91 low Critical High Medium Low

Vulnerabilities (301)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100719 - Improper Locking
CVE-2024-53047		 CWE-667 Low
No
No
 4.8.8 20.11.2024 SB2024112046
SB2024112952
SB2025020313
and 11 more
#VU100714 - NULL Pointer Dereference
CVE-2024-53064		 CWE-476 Low
No
No
 4.8.8 20.11.2024 SB2024112041
SB20250115100
SB2025011731
and 24 more
#VU100163 - Missing release of memory after effective lifetime
CVE-2024-50252		 CWE-401 Low
No
No
 4.8.8 10.11.2024 SB2024111007
SB2024112401
SB2024121502
and 21 more
#VU99809 - Use After Free
CVE-2024-50130		 CWE-416 Low
No
No
 4.8.8 05.11.2024 SB2024110567
SB2024120659
SB2024121502
and 18 more
#VU99806 - Use After Free
CVE-2024-50125		 CWE-416 Low
No
No
 4.8.8 05.11.2024 SB2024110564
SB2024121502
SB2024121503
and 48 more
#VU99805 - Use After Free
CVE-2024-50124		 CWE-416 Low
No
No
 4.8.8 05.11.2024 SB2024110563
SB2024112267
SB2024121502
and 22 more
#VU99221 - Improper input validation
CVE-2024-49977		 CWE-20 Low
No
No
 4.8.8 22.10.2024 SB20241022333
SB2024121358
SB2024121359
and 26 more
#VU99162 - Resource Management Errors
CVE-2022-49016		 CWE-399 Low
No
No
 4.8.8 22.10.2024 SB20241022274
SB2024111334
SB2024112835
and 4 more
#VU99146 - Resource Management Errors
CVE-2024-49866		 CWE-399 Low
No
No
 4.8.8 22.10.2024 SB20241022258
SB2024110167
SB2024110169
and 34 more
#VU99128 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-47715		 CWE-362 Low
No
No
 4.8.8 22.10.2024 SB20241022240
SB2024120659
SB2024121065
and 21 more
#VU99020 - Improper Locking
CVE-2024-49875		 CWE-667 Low
No
No
 4.8.8 22.10.2024 SB20241022132
SB2024110169
SB2024110172
and 36 more
#VU98952 - NULL Pointer Dereference
CVE-2024-49949		 CWE-476 Low
No
No
 4.8.8 22.10.2024 SB2024102264
SB2024111334
SB20241115106
and 57 more
#VU97826 - Resource Management Errors
CVE-2024-46820		 CWE-399 Low
No
No
 4.8.8 30.09.2024 SB2024093077
SB2025020313
SB2025112543
and 1 more
#VU97780 - Use After Free
CVE-2024-46845		 CWE-416 Low
No
No
 4.8.8 30.09.2024 SB2024093033
SB2024101233
SB2024102132
and 12 more
#VU97170 - Out-of-bounds read
CVE-2024-45020		 CWE-125 Low
No
No
 4.8.8 12.09.2024 SB2024091213
SB2024092044
SB2024100877
and 14 more
#VU92245 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-33883		 CWE-1321 High
Available
No
 4.8.8 19.06.2024 SB2024061916
SB2024062871
SB2024072414
and 11 more
#VU90627 - NULL Pointer Dereference
CVE-2024-26615		 CWE-476 Low
No
No
 4.8.8 31.05.2024 SB20240531529
SB2024062123
SB2024062124
and 45 more
#VU90186 - Use After Free
CVE-2024-26961		 CWE-416 Low
No
No
 4.8.8 31.05.2024 SB20240531107
SB2024061046
SB2024070838
and 44 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 4.8.8 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 4.8.8 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more


Showing elements 1 - 20 out of 301