Known vulnerabilities in IBM DB2

Software: IBM DB2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Total vulnerabilities: 239
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DB2 IBM DB2 is affected by 239 known vulnerabilities: 1 critical, 21 high, 132 medium, 85 low Critical High Medium Low

Vulnerabilities (239)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132273 - Incorrect Calculation
CVE-2025-14813
CWE-682 Medium
No
No
- 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 18 more
#VU130216 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-41417
CWE-93 Medium
No
No
11.5.9 05.05.2026 SB20260505124
SB2026051351
SB2026051901
and 6 more
#VU130215 - Resource exhaustion
CVE-2026-42587
CWE-400 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 14 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42581
CWE-444 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 12 more
#VU130211 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42580
CWE-444 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 6 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585
CWE-444 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 13 more
#VU130206 - Allocation of Resources Without Limits or Throttling
CVE-2026-42583
CWE-770 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052039
SB20260528254
and 10 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584
CWE-444 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 13 more
#VU128402 - Improper Encoding or Escaping of Output
CVE-2026-34480
CWE-116 Medium
No
No
- 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 19 more
#VU128401 - Improper Encoding or Escaping of Output
CVE-2026-34479
CWE-116 Medium
No
No
11.5.9, 12.1.4 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 17 more
#VU128400 - Improper Output Neutralization for Logs
CVE-2026-34478
CWE-117 Medium
No
No
- 28.04.2026 SB20260428217
SB2026052632
SB2026052731
and 17 more
#VU128399 - Improper Certificate Validation
CVE-2026-34477
CWE-295 Medium
No
No
- 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 20 more
#VU126758 - Improper input validation
CVE-2026-22016
CWE-20 Medium
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126761 - Improper input validation
CVE-2026-22021
CWE-20 Medium
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 78 more
#VU126762 - Improper input validation
CVE-2026-22013
CWE-20 Medium
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 75 more
#VU126764 - Improper input validation
CVE-2026-22018
CWE-20 Low
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126765 - Improper input validation
CVE-2026-22007
CWE-20 Low
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU126766 - Improper input validation
CVE-2026-34268
CWE-20 Low
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 76 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871
CWE-770 Medium
No
No
- 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 15 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870
CWE-444 Medium
Available
No
- 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more


Showing elements 1 - 20 out of 239