Known vulnerabilities in IBM DB2 - page 11

Software: IBM DB2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Total vulnerabilities: 248
Public exploits: 10
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DB2 IBM DB2 is affected by 248 known vulnerabilities: 1 critical, 22 high, 140 medium, 85 low Critical High Medium Low

Vulnerabilities (248)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64634 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-22389
CWE-89 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7, 11.5.7 24.06.2022 SB2022062405
SB2022082224
SB2023040617
#VU60739 - Integer overflow
CVE-2022-25315
CWE-190 High
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235
CWE-94 High
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236
CWE-20 Medium
No
No
9.7.0.11, 10.1.0.6, 10.5.0.11, 11.1.4.7 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832
CWE-94 Medium
No
No
11.5.6.0, 11.5.7.0 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105
CWE-835 Medium
Available
No
11.5.6.0, 11.5.7.0 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 170 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104
CWE-502 Medium
No
No
11.5.6.0, 11.5.7.0 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046
CWE-94 High
Available
Exploited
11.5.6.0, 11.5.7.0 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 179 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
11.5.6.0, 11.5.7.0 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 339 more
#VU58798 - Permissions, Privileges, and Access Controls
CVE-2021-20373
CWE-264 Medium
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58797 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29752
CWE-200 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58796 - Incorrect Default Permissions
CVE-2020-4976
CWE-276 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58795 - Improper Authorization
CVE-2021-38931
CWE-285 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU58794 - Permissions, Privileges, and Access Controls
CVE-2021-38926
CWE-264 Low
No
No
11.5.7.0 09.12.2021 SB2021120915
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550
CWE-300 Medium
No
No
7.0.11.0, 8.0.7.5 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57496 - Improper input validation
CVE-2021-35603
CWE-20 Low
No
No
7.0.11.0, 8.0.7.5 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU55060 - Improper input validation
CVE-2021-2341
CWE-20 Low
No
No
7.0.11.0, 8.0.7.5 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 72 more
#VU46004 - Incorrect Permission Assignment for Critical Resource
CVE-2020-4414
CWE-732 Low
No
No
9.7.0.11, 10.1.0.6, 10.5.0.1, 11.1 FP5 25.08.2020 SB2020082509
#VU16565 - Improper input validation
CVE-2018-1977
CWE-20 Low
No
No
11.1.4.4 12.12.2018 SB2018121717


Showing elements 201 - 220 out of 248