Known vulnerabilities in IBM DB2 - page 4

Software: IBM DB2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Total vulnerabilities: 239
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DB2 IBM DB2 is affected by 239 known vulnerabilities: 1 critical, 21 high, 132 medium, 85 low Critical High Medium Low

Vulnerabilities (239)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95163 - Incorrect Permission Assignment for Critical Resource
CVE-2021-20264
CWE-732 Low
No
No
5.0 02.08.2024 SB2021100629
SB2024080224
#VU90715 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-29180
CWE-22 Medium
No
No
5.0 03.06.2024 SB2024060314
SB2024060328
SB2024060410
and 18 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849
CWE-200 Low
No
No
5.0 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU87538 - Resource exhaustion
CVE-2024-28180
CWE-400 Medium
No
No
5.0 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU86944 - Server-Side Request Forgery (SSRF)
CVE-2023-42282
CWE-918 Medium
No
No
5.0 01.03.2024 SB2024030127
SB2024030148
SB2024030415
and 29 more
#VU86049 - Insufficient Verification of Data Authenticity
CVE-2024-24557
CWE-345 Medium
No
No
5.0 02.02.2024 SB2024020242
SB2024032237
SB2024032712
and 18 more
#VU82122 - Improper input validation
CVE-2023-35116
CWE-20 Low
No
No
5.0 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
5.0 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU71307 - Improper input validation
CVE-2023-22795
CWE-20 Medium
No
No
5.0 18.01.2023 SB2023011833
SB2023021735
SB2023021739
and 5 more
#VU65495 - Improper input validation
CVE-2022-34169
CWE-20 High
Available
No
5.0 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU65496 - Improper input validation
CVE-2022-21541
CWE-20 Medium
No
No
5.0 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU65497 - Improper input validation
CVE-2022-21540
CWE-20 Medium
No
No
5.0 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 105 more
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565
CWE-532 Low
No
No
5.0 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU62398 - Improper input validation
CVE-2022-21476
CWE-20 Medium
No
No
5.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 69 more
#VU59722 - Improper input validation
CVE-2022-21360
CWE-20 Medium
No
No
5.0 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 93 more
#VU59723 - Improper input validation
CVE-2022-21365
CWE-20 Medium
No
No
5.0 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 94 more
#VU52942 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-32052
CWE-113 Medium
No
No
5.0 06.05.2021 SB2021050627
SB2022041125
SB2022041126
and 7 more
#VU52449 - Improper input validation
CVE-2021-2163
CWE-20 Medium
No
No
5.0 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more
#VU27222 - Improper input validation
CVE-2020-2830
CWE-20 Medium
No
No
5.0 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 45 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250
CWE-256 Low
No
No
5.0 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more


Showing elements 61 - 80 out of 239