Known vulnerabilities in IBM DB2 11.1.3.3 iFix002

Software: IBM DB2
Version: 11.1.3.3 iFix002
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Total vulnerabilities: 31
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM DB2 version 11.1.3.3 iFix002 IBM DB2 11.1.3.3 iFix002 is affected by 31 vulnerabilities: 1 critical, 3 high, 9 medium, 18 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106926 - Resource Management Errors
CVE-2024-57699
CWE-399 Medium
No
No
- 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 63 more
#VU75498 - Improper input validation
CVE-2023-27559
CWE-20 Medium
No
No
- 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 8 more
#VU75497 - Resource Management Errors
CVE-2023-26022
CWE-399 Low
No
No
- 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 7 more
#VU75496 - Improper input validation
CVE-2023-26021
CWE-20 Medium
No
No
- 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 8 more
#VU75494 - Improper input validation
CVE-2023-29255
CWE-20 Medium
No
No
- 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 7 more
#VU75493 - Permissions, Privileges, and Access Controls
CVE-2023-29257
CWE-264 Low
No
No
- 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 8 more
#VU72059 - Improper Privilege Management
CVE-2022-43927
CWE-269 Low
No
No
- 08.02.2023 SB2023020862
SB2023032013
SB2023060713
and 7 more
#VU72058 - Resource exhaustion
CVE-2022-43929
CWE-400 Low
No
No
- 08.02.2023 SB2023020862
SB2023032013
SB2023060713
and 7 more
#VU69507 - Improper Privilege Management
CVE-2022-22483
CWE-269 Low
No
No
11.5.8 22.11.2022 SB2022112251
SB2023012308
#VU67214 - Improper input validation
CVE-2022-35637
CWE-20 Medium
No
No
10.5.0.11, 11.1.4.7, 11.5.8 13.09.2022 SB2022091321
SB2023012308
#VU64650 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22390
CWE-200 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7, 11.5.7 24.06.2022 SB2022062419
SB2022082224
SB2023040617
#VU60739 - Integer overflow
CVE-2022-25315
CWE-190 High
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313
CWE-121 High
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235
CWE-94 High
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236
CWE-20 Medium
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104
CWE-502 Medium
No
No
11.5.6.0, 11.5.7.0 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Public exploit available
Exploited
11.5.6.0, 11.5.7.0 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU58798 - Permissions, Privileges, and Access Controls
CVE-2021-20373
CWE-264 Medium
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU57150 - Improper Certificate Validation
CVE-2014-3577
CWE-295 Low
No
No
11.5.8 08.10.2021 SB2014082106
SB2021100807
SB2023020872
and 24 more


Showing elements 1 - 20 out of 31