Known vulnerabilities in IBM DB2 - page 11

Software: IBM DB2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Total vulnerabilities: 239
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DB2 IBM DB2 is affected by 239 known vulnerabilities: 1 critical, 21 high, 132 medium, 85 low Critical High Medium Low

Vulnerabilities (239)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105
CWE-835 Medium
Available
No
11.5.6.0, 11.5.7.0 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104
CWE-502 Medium
No
No
11.5.6.0, 11.5.7.0 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046
CWE-94 High
Available
Exploited
11.5.6.0, 11.5.7.0 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
11.5.6.0, 11.5.7.0 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU58798 - Permissions, Privileges, and Access Controls
CVE-2021-20373
CWE-264 Medium
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58797 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29752
CWE-200 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58796 - Incorrect Default Permissions
CVE-2020-4976
CWE-276 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58795 - Improper Authorization
CVE-2021-38931
CWE-285 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58794 - Permissions, Privileges, and Access Controls
CVE-2021-38926
CWE-264 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU46004 - Incorrect Permission Assignment for Critical Resource
CVE-2020-4414
CWE-732 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.1, 11.1 FP5 25.08.2020 SB2020082509
#VU16565 - Improper input validation
CVE-2018-1977
CWE-20 Low
No
No
11.1.4.4 12.12.2018 SB2018121717
#VU16160 - Stack-based buffer overflow
CVE-2018-1897
CWE-121 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.10 28.11.2018 SB2018112812
#VU16208 - Memory corruption
CVE-2018-1711
CWE-119 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.10, 11.1.4.4 28.11.2018 SB2018120305
#VU16209 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1857
CWE-200 Low
No
No
11.1.4.4 28.11.2018 SB2018120305
#VU15922 - UNIX Symbolic Link (Symlink) Following
CVE-2018-1834
CWE-61 Low
No
No
- 16.11.2018 SB2018111602
#VU15921 - UNIX Symbolic Link (Symlink) Following
CVE-2018-1799
CWE-61 Low
No
No
- 16.11.2018 SB2018111602
#VU15920 - UNIX Symbolic Link (Symlink) Following
CVE-2018-1781
CWE-61 Low
No
No
- 16.11.2018 SB2018111602
#VU15906 - Uncontrolled Search Path Element
CVE-2018-1802
CWE-427 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.10, 11.1.3.3 iFix002 12.11.2018 SB2018111504
#VU15919 - UNIX Symbolic Link (Symlink) Following
CVE-2018-1780
CWE-61 Low
No
No
- 12.11.2018 SB2018111602
#VU13610 - Permissions, Privileges, and Access Controls
CVE-2018-1566
CWE-264 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.9, 11.1.3.3 iFix001 07.07.2018 SB2018070912


Showing elements 201 - 220 out of 239