Skip to contentIbm Db2 vulnerabilities
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilitiesCVE-2026-169157.5 High
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilitiesCVE-2026-169055.3 Medium
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilitiesCVE-2026-168798.8 High
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilitiesCVE-2026-167088.3 High
- ibm db2IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parserCVE-2026-105348.4 High
- ibm db2IBM® Db2® is vulnerable to privilege escalation with a specially crafted queryCVE-2026-105438.2 High
- ibm db2IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.CVE-2026-164804.3 Medium
- ibm db2IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.CVE-2026-180975.5 Medium
- ibm db2IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leakCVE-2026-180963.3 Low
- ibm db2 mirror for iIBM Db2 Mirror for i is vulnerable to OS command injection []CVE-2026-169569.8 Critical
- ibm db2IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shellCVE-2026-105358.4 High
- ibm db2IBM® Db2® is vulnerable to a denial of service when running non fenced federated queriesCVE-2026-106956.2 Medium
- ibm agentics, db2 genius hub +1 moreUse of Potentially Dangerous Functionthat in IBM Db2 Genius HubCVE-2026-145014.3 Medium
- ibm db2IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of serviceCVE-2026-77715.5 Medium
- ibm db2IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user controlCVE-2026-97627.8 High
- ibm db2IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tablesCVE-2025-363725.5 Medium
- ibm db2IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handlingCVE-2026-101099.8 Critical
- ibm db2IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated userCVE-2026-119066.5 Medium
- ibm db2, db2 on cloud pak for data and db2 warehouse on cloud pak for data, db2 warehouse +2 moreMultiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.CVE-2023-338545.3 Medium
- ibm db2, db2 on cloud pak for data and db2 warehouse on cloud pak for data, db2 warehouse +2 moreMultiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.CVE-2025-26696.0 Medium
- ibm db2, db2 on cloud pak for data and db2 warehouse on cloud pak for data, db2 warehouse +2 moreMultiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.CVE-2024-541786.5 Medium
- ibm db2IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special queryCVE-2026-69386.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tablesCVE-2026-60535.5 Medium
- ibm db2IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tablesCVE-2026-60526.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heapCVE-2026-60515.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service with a specially crafted query when running an AUTONOMOUS procedureCVE-2026-17187.1 High
- ibm db2IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase bucketsCVE-2025-137555.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueriesCVE-2026-15776.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automaticCVE-2025-361226.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurationsCVE-2025-146885.3 Medium
- ibm db2IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined indexCVE-2026-13526.5 Medium
- ibm db2 recovery expertIBM Db2 Recovery Expert Missing Integrity CheckCVE-2026-3856Fix available5.3 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and WindowsCVE-2025-278986.3 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and WindowsCVE-2025-278995.3 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and WindowsCVE-2025-279006.8 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and WindowsCVE-2025-279016.5 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and WindowsCVE-2025-279035.9 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and WindowsCVE-2025-279046.5 Medium
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and WindowsCVE-2025-331306.5 Medium
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and WindowsCVE-2025-331246.5 Medium
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and WindowsCVE-2025-131085.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 XML External Entity ReferenceCVE-2025-362477.1 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Information DisclosureCVE-2025-364255.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of ServiceCVE-2025-138676.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of ServiceCVE-2025-146896.5 Medium
- ibm db2 big sql on cloud pak for dataIBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an APICVE-2024-397245.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of ServiceCVE-2025-2668Fix available6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of ServiceCVE-2025-36001Public exploitFix available6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of ServiceCVE-2025-36009Fix available6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Denial of ServiceCVE-2025-36070Fix available6.5 Medium
- Show moreLoading…