Known vulnerabilities in IBM DB2 - page 2

Software: IBM DB2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Total vulnerabilities: 248
Public exploits: 10
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DB2 IBM DB2 is affected by 248 known vulnerabilities: 1 critical, 22 high, 140 medium, 85 low Critical High Medium Low

Vulnerabilities (248)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132273 - Incorrect Calculation
CVE-2025-14813
CWE-682 Medium
No
No
- 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 21 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588
CWE-327 Medium
No
No
- 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 18 more
#VU132259 - Covert Timing Channel
CVE-2026-5598
CWE-385 Medium
No
No
- 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 19 more
#VU130215 - Resource exhaustion
CVE-2026-42587
CWE-400 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42581
CWE-444 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 17 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585
CWE-444 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 17 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584
CWE-444 Medium
No
No
- 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 17 more
#VU128402 - Improper Encoding or Escaping of Output
CVE-2026-34480
CWE-116 Medium
No
No
- 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 22 more
#VU128400 - Improper Output Neutralization for Logs
CVE-2026-34478
CWE-117 Medium
No
No
- 28.04.2026 SB20260428217
SB2026052632
SB2026052731
and 19 more
#VU128399 - Improper Certificate Validation
CVE-2026-34477
CWE-295 Medium
No
No
- 28.04.2026 SB20260428217
SB20260513128
SB2026052632
and 22 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870
CWE-444 Medium
Available
No
- 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 23 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188
CWE-131 High
No
No
- 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU121727 - Improper input validation
CVE-2026-21945
CWE-20 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 97 more
#VU121728 - Improper input validation
CVE-2026-21932
CWE-20 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 78 more
#VU121729 - Improper input validation
CVE-2026-21933
CWE-20 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 91 more
#VU121730 - Out-of-bounds read
CVE-2026-21925
CWE-125 Medium
No
No
- 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 93 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161
CWE-297 Medium
No
No
11.5.9, 12.1.4 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 102 more
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-67735
CWE-93 Medium
No
No
- 15.12.2025 SB2025121552
SB2025121974
SB2026012079
and 25 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056
CWE-444 Medium
No
No
- 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 39 more
#VU100095 - Memory corruption
CVE-2024-47072
CWE-119 Medium
No
No
11.5.9, 12.1.2 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 37 more


Showing elements 21 - 40 out of 248