Vulnerabilities > IBM > DB2

DATE CVE VULNERABILITY TITLE RISK
2023-12-04 CVE-2023-38003 Unspecified vulnerability in IBM DB2 10.5/11.1/11.5
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to.
network
low complexity
ibm
7.2
2023-12-04 CVE-2023-46167 Unspecified vulnerability in IBM DB2 11.5.6/11.5.8
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used.
network
low complexity
ibm
7.5
2023-12-04 CVE-2023-47701 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query.
network
low complexity
ibm
7.5
2023-12-04 CVE-2023-40692 Resource Exhaustion vulnerability in IBM DB2 10.5/11.1/11.5
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions.
network
low complexity
ibm CWE-400
7.5
2023-12-03 CVE-2023-45178 Unspecified vulnerability in IBM DB2 11.5
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used.
network
low complexity
ibm
7.5
2023-10-17 CVE-2023-38719 Unspecified vulnerability in IBM DB2 11.5.8
IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation on DPF.
local
low complexity
ibm
4.4
2023-10-17 CVE-2023-40372 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables.
network
low complexity
ibm
7.5
2023-10-17 CVE-2023-40373 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions.
network
low complexity
ibm
7.5
2023-10-16 CVE-2023-30991 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query.
network
low complexity
ibm
7.5
2023-10-16 CVE-2023-40374 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted query statement.
network
low complexity
ibm
7.5