Known vulnerabilities in IBM DB2 LUW

Vendor: IBM Corporation
Software: IBM DB2 LUW
Software CPE: cpe:2.3:a:ibm_corporation:ibm_db2_luw:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 69
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM DB2 LUW IBM DB2 LUW is affected by 69 known vulnerabilities: 10 high, 37 medium, 22 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122747 - Improper input validation
CVE-2025-13867		 CWE-20 Medium
No
No
 - 12.02.2026 SB2026021208
SB2026021211
SB2026021216
and 5 more
#VU122746 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2025-14689		 CWE-943 Medium
No
No
 - 12.02.2026 SB2026021207
SB2026021213
SB2026021215
and 5 more
#VU122744 - Unprotected Storage of Credentials
CVE-2025-36425		 CWE-256 Low
No
No
 - 12.02.2026 SB2026021205
SB2026022012
SB2026030931
and 3 more
#VU122743 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-36247		 CWE-611 Medium
No
No
 - 12.02.2026 SB2026021204
SB2026022012
SB2026030931
and 3 more
#VU118368 - Execution with Unnecessary Privileges
CVE-2025-36186		 CWE-250 Low
No
No
 - 12.11.2025 SB2025111248
#VU118366 - Allocation of Resources Without Limits or Throttling
CVE-2025-36136		 CWE-770 Low
No
No
 - 12.11.2025 SB2025111246
#VU118365 - Exposure of sensitive information to an unauthorized actor
CVE-2025-36131		 CWE-200 Medium
No
No
 - 12.11.2025 SB2025111245
#VU118363 - Allocation of Resources Without Limits or Throttling
CVE-2025-36008		 CWE-770 Medium
No
No
 - 12.11.2025 SB2025111244
#VU118362 - Improper Resource Shutdown or Release
CVE-2025-36006		 CWE-404 Medium
No
No
 - 12.11.2025 SB2025111243
#VU114127 - Uncontrolled Recursion
CVE-2025-33143		 CWE-674 Medium
No
No
 - 18.08.2025 SB2025081812
SB2025081836
SB2025090308
and 5 more
#VU114126 - Stack-based buffer overflow
CVE-2024-52894		 CWE-121 Low
No
No
 - 18.08.2025 SB2025081807
SB2025081836
SB2025090308
and 5 more
#VU114125 - Missing Release of Resource after Effective Lifetime
CVE-2025-36071		 CWE-772 Medium
No
No
 - 18.08.2025 SB2025081805
SB2025081836
SB2025090308
and 4 more
#VU114105 - Stack-based buffer overflow
CVE-2024-51473		 CWE-121 High
No
No
 - 15.08.2025 SB2025081511
SB2025081836
SB2025090308
and 4 more
#VU114104 - Stack-based buffer overflow
CVE-2024-49828		 CWE-121 High
No
No
 - 15.08.2025 SB2025081510
SB2025081836
SB2025090308
and 4 more
#VU113112 - Improper input validation
CVE-2024-52903		 CWE-20 Low
No
No
 - 22.07.2025 SB2025072220
SB2025072221
SB2025072348
and 2 more
#VU113111 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-1493		 CWE-362 Medium
No
No
 - 22.07.2025 SB2025072219
SB2025072221
SB2025072348
and 2 more
#VU113110 - Allocation of Resources Without Limits or Throttling
CVE-2025-1000		 CWE-770 Medium
No
No
 - 22.07.2025 SB2025072218
SB2025072221
SB2025072348
and 3 more
#VU113108 - Missing release of memory after effective lifetime
CVE-2025-1992		 CWE-401 Low
No
No
 - 22.07.2025 SB2025072216
SB2025072221
SB2025072348
and 3 more
#VU113107 - Allocation of Resources Without Limits or Throttling
CVE-2025-0915		 CWE-770 Medium
No
No
 - 22.07.2025 SB2025072215
SB2025072221
SB2025072348
and 3 more
#VU110188 - Uncontrolled Memory Allocation
CVE-2025-2518		 CWE-789 Low
No
No
 - 04.06.2025 SB2025060419
SB2025072221
SB2025072348
and 3 more


Showing elements 1 - 20 out of 69