Known vulnerabilities in IBM DB2 - page 9

Software: IBM DB2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2:*:*:*:*:*:*:*:*
Total vulnerabilities: 239
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DB2 IBM DB2 is affected by 239 known vulnerabilities: 1 critical, 21 high, 132 medium, 85 low Critical High Medium Low

Vulnerabilities (239)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79803 - Memory corruption
CVE-2023-39976
CWE-119 High
No
No
11.5.7, 11.5.8 21.08.2023 SB20230821103
SB20230821228
SB2023082854
and 22 more
#VU78917 - Out-of-bounds write
CVE-2023-35012
CWE-787 Medium
No
No
11.5.7, 11.5.8 03.08.2023 SB2023080324
SB2024021220
SB2024021317
and 8 more
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609
CWE-502 High
No
No
11.1.4.7, 11.5.7, 11.5.8 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU77561 - Cross-Site Request Forgery (CSRF)
CVE-2022-41296
CWE-352 High
No
No
4.6 20.06.2023 SB2023062019
#VU77560 - Cross-Site Request Forgery (CSRF)
CVE-2022-41297
CWE-352 Medium
No
No
4.6 20.06.2023 SB2023062019
#VU76906 - Out-of-bounds read
CVE-2023-2597
CWE-125 High
No
No
11.1.4.7, 11.5.7, 11.5.8 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU75498 - Improper input validation
CVE-2023-27559
CWE-20 Medium
No
No
- 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 8 more
#VU75497 - Resource Management Errors
CVE-2023-26022
CWE-399 Low
No
No
- 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 7 more
#VU75496 - Improper input validation
CVE-2023-26021
CWE-20 Medium
No
No
- 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 8 more
#VU75495 - Resource Management Errors
CVE-2023-27555
CWE-399 Low
No
No
- 25.04.2023 SB2023042561
SB2023050912
SB2023053014
and 7 more
#VU75265 - Improper input validation
CVE-2023-21938
CWE-20 Low
No
No
11.1.4.7, 11.5.7, 11.5.8 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75267 - Improper input validation
CVE-2023-21937
CWE-20 Low
No
No
11.1.4.7, 11.5.7, 11.5.8 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU67945 - Resource exhaustion
CVE-2022-36055
CWE-400 Medium
No
No
4.6 05.10.2022 SB2022100548
SB2022100551
SB2022102004
and 4 more
#VU67554 - Server-Side Request Forgery (SSRF)
CVE-2022-3172
CWE-918 Medium
No
No
4.6 21.09.2022 SB2022092138
SB2022102614
SB2023011939
and 23 more
#VU67396 - Improper input validation
CVE-2022-27664
CWE-20 Medium
No
No
4.6 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66070 - Resource exhaustion
CVE-2022-30633
CWE-400 Medium
No
No
4.6 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66069 - Resource exhaustion
CVE-2022-28131
CWE-400 Medium
No
No
4.6 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU63173 - Permissions, Privileges, and Access Controls
CVE-2022-29526
CWE-264 Low
No
No
4.6 14.05.2022 SB2022051403
SB2022051404
SB2022062928
and 65 more
#VU54184 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32690
CWE-200 Medium
No
No
4.6 17.06.2021 SB2021061703
SB2021062219
SB2021092220
and 3 more
#VU50431 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-21303
CWE-74 Medium
No
No
4.6 05.02.2021 SB2021020906
SB2021020907
SB2023062019


Showing elements 161 - 180 out of 239