Known vulnerabilities in IBM DB2

Software: IBM DB2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Total vulnerabilities: 248
Public exploits: 10
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DB2 IBM DB2 is affected by 248 known vulnerabilities: 1 critical, 22 high, 140 medium, 85 low Critical High Medium Low

Vulnerabilities (248)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138901 - Improper Access Control
CVE-2026-56746
CWE-284 Medium
No
No
11.5.9 SU 90467 21.07.2026 SB2026072182
SB2026080509
SB2026091105
and 2 more
#VU137572 - Resource exhaustion
CVE-2026-55831
CWE-400 Medium
No
No
11.5.9 SU 90467 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU137571 - Improper input validation
CVE-2026-55833
CWE-20 Medium
No
No
11.5.9 SU 90467 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU137568 - Missing Release of Resource after Effective Lifetime
CVE-2026-56745
CWE-772 Medium
No
No
11.5.9 SU 90467 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU137566 - Missing release of memory after effective lifetime
CVE-2026-56819
CWE-401 Medium
No
No
11.5.9 SU 90467 15.07.2026 SB2026071505
SB2026080509
SB2026083172
and 7 more
#VU133457 - Incorrect Comparison
CVE-2026-44249
CWE-697 High
No
No
11.5.9 SU 90467 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 19 more
#VU133452 - Improper Certificate Validation
CVE-2026-50010
CWE-295 Medium
No
No
11.5.9 SU 90467 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 18 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636
CWE-90 Medium
No
No
11.5.9 SU 90467 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 16 more
#VU130216 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-41417
CWE-93 Medium
No
No
11.5.9 05.05.2026 SB20260505124
SB2026051351
SB2026051901
and 10 more
#VU130211 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42580
CWE-444 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 9 more
#VU130206 - Allocation of Resources Without Limits or Throttling
CVE-2026-42583
CWE-770 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052039
SB20260528254
and 15 more
#VU128401 - Improper Encoding or Escaping of Output
CVE-2026-34479
CWE-116 Medium
No
No
11.5.9, 12.1.4 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 20 more
#VU127237 - Deserialization of Untrusted Data
CVE-2026-41586
CWE-502 Medium
No
No
11.5.9 SU 90467 23.04.2026 SB20260423159
SB2026091106
#VU126758 - Improper input validation
CVE-2026-22016
CWE-20 Medium
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 80 more
#VU126761 - Improper input validation
CVE-2026-22021
CWE-20 Medium
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 82 more
#VU126762 - Improper input validation
CVE-2026-22013
CWE-20 Medium
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 79 more
#VU126764 - Improper input validation
CVE-2026-22018
CWE-20 Low
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 79 more
#VU126765 - Improper input validation
CVE-2026-22007
CWE-20 Low
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 79 more
#VU126766 - Improper input validation
CVE-2026-34268
CWE-20 Low
No
No
11.5.9, 12.1.4 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 79 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871
CWE-770 Medium
No
No
- 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 17 more


Showing elements 1 - 20 out of 248