Known vulnerabilities in IBM DB2 - page 7
Vendor:
IBM Corporation
Software:
IBM DB2
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
239
Public exploits:
10
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
12.1.4
11.5.6
11.5.5
12.1.3
12.1.2
12.1.0
5.2.0
5.1
4.7
4.5
4.0
3.5
11.1.4 FP7
12.1.1
5.0.3
5.0
11.1
4.8
11.5.9
4.6
11.5.7000.1973
11.5.8
10.5 FP11
9.7 FP11
1
11.1.4.3
11.1.4.2
11.1.4.1
11.5.7
11.1.4.7
8.0.7.5
7.0.11.0
11.5.7.0
11.5.6.0
11.5.5.1
11.5.5.0
11.5.4.0
11.5.0.0
11.1.4.6
11.1.4.5
11.1.4.4 iFix001
11.1.3.3
11.1.2.2 iFix002
11.1.2.2 iFix001
11.1.2.2
11.1.1.1 iFix001
11.1.1.1
10.5.0.11
10.1.0.3a
9.7.0.3a
9.5.0.6a
9.5.0.4a
9.5.0.3b
9.5.0.3a
9.5.0.2a
9.0.1.7a
9.0.1.6a
9.0.1.4a
9.0.1.3a
9.0.1.2a
9.7.0.9a
9.1.0.12
11.1 FP5
11.5
11.1.4.4
11.1.3.3 iFix002
10.5.0.10
11.1.3.3 iFix001
10.1.0.6
11.1 FP3
10.5.0.9
11.1 FP2
11.1 FP1
10.5.0.8
11.1.0.0
9.7.0.10
10.1.0.5
9.7.0.11
9.8.0.2
9.8.0.1
10.5.0.7
10.5.0.6
10.5.0.5
10.5.0.4
9.5.0.10
10.5.0.3
10.1.0.4
9.7.0.7
9.7.0.8
9.7.0.9
10.5.0.2
10.5.0.1
10.1.0.3
10.1.0.2
10.1.0.1
10.5
10.1
9.8.0.5
9.5.0.6
9.7.0.6
9.5.0.5
9.1.0.1
9.1.0.8
9.1.0.11
9.1.0.6
9.1.0.7
9.1.0.4
9.1.0.5
9.1.0.2
9.1.0.3
9.5.0.2
9.5.0.3
9.5.0.1
9.1.0.10
9.1.0.9
9.5.0.8
9.5.0.9
9.5.0.7
9.5.0.4
9.8.0.4
9.8.0.3
9.7.0.5
9.8
9.7.0.3
9.7.0.4
9.7.0.2
9.7.0.1
9.7
9.5.0.0
8.2 fixpack15
9.1.0.0
8.2
8.1.7b
8.1.8
8.1.9a
8.10
8.12
8.1.6c
8.0
8.1
8.1.4
8.2.0
8.2.1
8.1.8a
8.1.9
8.1.7
8.1.5
8.1.6
8.2.2
9.0
10.5.0.0
10.1.0.0
9.8.0.0
9.7.0.0
Vulnerabilities (239)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU84388 - Resource exhaustion CVE-2023-46167 |
CWE-400 | Medium | 11.5.8, 11.5.9 | 13.12.2023 |
SB2023121333 SB2024032815 SB2024040818 and 10 more |
||
| #VU84377 - Resource exhaustion CVE-2023-45178 |
CWE-400 | Medium | 11.5.8, 11.5.9 | 13.12.2023 |
SB2023121311 SB2024032815 SB2024040314 and 13 more |
||
| #VU84376 - Resource exhaustion CVE-2023-29258 |
CWE-400 | Medium | 11.1.4.7, 11.5.0.0, 11.5.8, 11.5.9 | 13.12.2023 |
SB2023121310 SB2024032815 SB2024040818 and 10 more |
||
| #VU84374 - Resource exhaustion CVE-2023-40687 |
CWE-400 | Medium | 10.5 FP11, 11.1.4.7, 11.5.0.0, 11.5.8, 11.5.9 | 13.12.2023 |
SB2023121309 SB2024032815 SB2024040818 and 10 more |
||
| #VU84368 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-38727 |
CWE-89 | Medium | 11.1.4.7, 11.5.0.0, 11.5.8, 11.5.9 | 13.12.2023 |
SB2023121302 SB2024032815 SB2024040818 and 10 more |
||
| #VU84102 - Resource exhaustion CVE-2023-40692 |
CWE-400 | Medium | 10.5 FP11, 11.1.4.7, 11.5.0.0, 11.5.8, 11.5.9 | 12.12.2023 |
SB2023121236 SB2024032815 SB2024040818 and 11 more |
||
| #VU84101 - Resource exhaustion CVE-2023-43020 |
CWE-400 | Low | 10.5 FP11, 11.1.4.7, 11.5.0.0, 11.5.9 | 12.12.2023 |
SB2023121237 SB2024032815 SB2024040818 and 10 more |
||
| #VU84099 - Improper Access Control CVE-2023-38003 |
CWE-284 | Low | 10.5 FP11, 11.1.4.7, 11.5.0.0, 11.5.9 | 12.12.2023 |
SB2023121230 SB2024032815 SB2024040818 and 10 more |
||
| #VU84043 - Double Free CVE-2002-0059 |
CWE-415 | Medium | 10.5 FP11, 11.1.4.7, 11.5, 11.5.9 | 11.12.2023 |
SB2023121128 SB2024032815 SB2024040818 and 10 more |
||
| #VU82583 - Observable discrepancy CVE-2023-33850 |
CWE-203 | Medium | 10.5 FP11, 11.1.4.7, 11.5.0.0, 11.5.7, 11.5.8 | 31.10.2023 |
SB2023103131 SB2023111305 SB2023111407 and 106 more |
||
| #VU82577 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-38740 |
CWE-89 | Medium | 11.5.0.0, 11.5.7, 11.5.8 | 31.10.2023 |
SB2023103131 SB2023110304 SB2023111305 and 10 more |
||
| #VU82454 - Allocation of Resources Without Limits or Throttling CVE-2023-43642 |
CWE-770 | Medium | - | 26.10.2023 |
SB2023102621 SB2023102628 SB2023103020 and 63 more |
||
| #VU79797 - Improper input validation CVE-2023-32731 |
CWE-20 | Medium | - | 21.08.2023 |
SB2023082198 SB2023082860 SB2023091213 and 28 more |
||
| #VU77573 - Resource exhaustion CVE-2023-34462 |
CWE-400 | Medium | - | 20.06.2023 |
SB2023062026 SB2023072521 SB2023072539 and 98 more |
||
| #VU75044 - Uncontrolled Recursion CVE-2023-1370 |
CWE-674 | Medium | - | 12.04.2023 |
SB2023041258 SB2023041259 SB2023041809 and 130 more |
||
| #VU71253 - Improper input validation CVE-2022-3510 |
CWE-20 | Medium | - | 17.01.2023 |
SB2023011753 SB2023011787 SB2023013027 and 37 more |
||
| #VU69670 - Improper input validation CVE-2022-3509 |
CWE-20 | Medium | - | 29.11.2022 |
SB2022111433 SB2022112934 SB2023011787 and 58 more |
||
| #VU69293 - Improper input validation CVE-2022-3171 |
CWE-20 | Medium | - | 14.11.2022 |
SB2022111433 SB2022111440 SB2022112934 and 105 more |
||
| #VU66153 - Heap-based Buffer Overflow CVE-2022-37434 |
CWE-122 | High | 10.5 FP11, 11.1.4.7, 11.5, 11.5.9 | 07.08.2022 |
SB2022080705 SB2022081833 SB2022081851 and 154 more |
||
| #VU61671 - Memory corruption CVE-2018-25032 |
CWE-119 | Medium | 10.5 FP11, 11.1.4.7, 11.5, 11.5.9 | 28.03.2022 |
SB2022032844 SB2022032845 SB2022033018 and 192 more |
Showing elements 121 - 140 out of 239