Known vulnerabilities in IBM DB2 - page 9
Vendor:
IBM Corporation
Software:
IBM DB2
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
248
Public exploits:
10
Known exploited (KEV):
2
Breakdown by Severity Chart
11.5.9 SU 90467
12.1.4
11.5.6
11.5.5
12.1.3
12.1.2
12.1.0
5.2.0
5.1
4.7
4.5
4.0
3.5
11.1.4 FP7
12.1.1
5.0.3
5.0
11.1
4.8
11.5.9
4.6
11.5.7000.1973
11.5.8
10.5 FP11
9.7 FP11
1
11.1.4.3
11.1.4.2
11.1.4.1
11.5.7
11.1.4.7
8.0.7.5
7.0.11.0
11.5.7.0
11.5.6.0
11.5.5.1
11.5.5.0
11.5.4.0
11.5.0.0
11.1.4.6
11.1.4.5
11.1.4.4 iFix001
11.1.3.3
11.1.2.2 iFix002
11.1.2.2 iFix001
11.1.2.2
11.1.1.1 iFix001
11.1.1.1
10.5.0.11
10.1.0.3a
9.7.0.3a
9.5.0.6a
9.5.0.4a
9.5.0.3b
9.5.0.3a
9.5.0.2a
9.0.1.7a
9.0.1.6a
9.0.1.4a
9.0.1.3a
9.0.1.2a
9.7.0.9a
9.1.0.12
11.1 FP5
11.5
11.1.4.4
11.1.3.3 iFix002
10.5.0.10
11.1.3.3 iFix001
10.1.0.6
11.1 FP3
10.5.0.9
11.1 FP2
11.1 FP1
10.5.0.8
11.1.0.0
9.7.0.10
10.1.0.5
9.7.0.11
9.8.0.2
9.8.0.1
10.5.0.7
10.5.0.6
10.5.0.5
10.5.0.4
9.5.0.10
10.5.0.3
10.1.0.4
9.7.0.7
9.7.0.8
9.7.0.9
10.5.0.2
10.5.0.1
10.1.0.3
10.1.0.2
10.1.0.1
10.5
10.1
9.8.0.5
9.5.0.6
9.7.0.6
9.5.0.5
9.1.0.1
9.1.0.8
9.1.0.11
9.1.0.6
9.1.0.7
9.1.0.4
9.1.0.5
9.1.0.2
9.1.0.3
9.5.0.2
9.5.0.3
9.5.0.1
9.1.0.10
9.1.0.9
9.5.0.8
9.5.0.9
9.5.0.7
9.5.0.4
9.8.0.4
9.8.0.3
9.7.0.5
9.8
9.7.0.3
9.7.0.4
9.7.0.2
9.7.0.1
9.7
9.5.0.0
8.2 fixpack15
9.1.0.0
8.2
8.1.7b
8.1.8
8.1.9a
8.10
8.12
8.1.6c
8.0
8.1
8.1.4
8.2.0
8.2.1
8.1.8a
8.1.9
8.1.7
8.1.5
8.1.6
8.2.2
9.0
10.5.0.0
10.1.0.0
9.8.0.0
9.7.0.0
Vulnerabilities (248)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU81723 - Resource exhaustion CVE-2023-38720 |
CWE-400 | Low | 11.1.4.7, 11.5.0.0, 11.5.7, 11.5.8 | 10.10.2023 |
SB2023101015 SB2023103131 SB2023110304 and 9 more |
||
| #VU81722 - Resource exhaustion CVE-2023-30991 |
CWE-400 | Medium | 11.1.4.7, 11.5.0.0, 11.5.7, 11.5.8 | 10.10.2023 |
SB2023101014 SB2023103131 SB2023110304 and 9 more |
||
| #VU81713 - Resource exhaustion CVE-2023-40373 |
CWE-400 | Low | 10.5 FP11, 11.1.4.7, 11.5.7, 11.5.8 | 09.10.2023 |
SB2023100932 SB2023103131 SB2023110304 and 9 more |
||
| #VU81712 - Resource exhaustion CVE-2023-38719 |
CWE-400 | Medium | 11.5.8 | 09.10.2023 |
SB2023100931 SB2023103131 SB2023110304 and 10 more |
||
| #VU79803 - Memory corruption CVE-2023-39976 |
CWE-119 | High | 11.5.7, 11.5.8 | 21.08.2023 |
SB20230821103 SB20230821228 SB2023082854 and 22 more |
||
| #VU78917 - Out-of-bounds write CVE-2023-35012 |
CWE-787 | Medium | 11.5.7, 11.5.8 | 03.08.2023 |
SB2023080324 SB2024021220 SB2024021317 and 8 more |
||
| #VU78901 - Deserialization of Untrusted Data CVE-2022-40609 |
CWE-502 | High | 11.1.4.7, 11.5.7, 11.5.8 | 03.08.2023 |
SB2023080307 SB2023080808 SB2023080809 and 56 more |
||
| #VU77561 - Cross-Site Request Forgery (CSRF) CVE-2022-41296 |
CWE-352 | High | 4.6 | 20.06.2023 |
SB2023062019 |
||
| #VU76906 - Out-of-bounds read CVE-2023-2597 |
CWE-125 | High | 11.1.4.7, 11.5.7, 11.5.8 | 05.06.2023 |
SB2023060525 SB2023060705 SB2023060930 and 86 more |
||
| #VU75264 - Improper input validation CVE-2023-21939 |
CWE-20 | Medium | 11.1.4.7, 11.5.7, 11.5.8 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75265 - Improper input validation CVE-2023-21938 |
CWE-20 | Low | 11.1.4.7, 11.5.7, 11.5.8 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 181 more |
||
| #VU75266 - Improper input validation CVE-2023-21968 |
CWE-20 | Low | 11.1.4.7, 11.5.7, 11.5.8 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75267 - Improper input validation CVE-2023-21937 |
CWE-20 | Low | 11.1.4.7, 11.5.7, 11.5.8 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 184 more |
||
| #VU75260 - Improper input validation CVE-2023-21930 |
CWE-20 | Medium | 11.1.4.7, 11.5.7, 11.5.8 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 191 more |
||
| #VU75261 - Improper input validation CVE-2023-21967 |
CWE-20 | Medium | 11.1.4.7, 11.5.7, 11.5.8 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 189 more |
||
| #VU75262 - Improper input validation CVE-2023-21954 |
CWE-20 | Medium | 11.1.4.7, 11.5.7, 11.5.8 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 166 more |
||
| #VU67945 - Resource exhaustion CVE-2022-36055 |
CWE-400 | Medium | 4.6 | 05.10.2022 |
SB2022100548 SB2022100551 SB2022102004 and 4 more |
||
| #VU67554 - Server-Side Request Forgery (SSRF) CVE-2022-3172 |
CWE-918 | Medium | 4.6 | 21.09.2022 |
SB2022092138 SB2022102614 SB2023011939 and 23 more |
||
| #VU54184 - Exposure of sensitive information to an unauthorized actor CVE-2021-32690 |
CWE-200 | Medium | 4.6 | 17.06.2021 |
SB2021061703 SB2021062219 SB2021092220 and 3 more |
||
| #VU50431 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2021-21303 |
CWE-74 | Medium | 4.6 | 05.02.2021 |
SB2021020906 SB2021020907 SB2023062019 |
Showing elements 161 - 180 out of 248