Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:11.1.4.7:*:*:*:*:*:*:*

part: a version: 11.1.4.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36131 vulnerable 2026-06-08 07:21:01.113883 IBM Db2 information disclosure
MEDIUM (4.6)
IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) clpplus command exposes user credentials to the terminal which could be obtained by a third party with physical access to the system.
Published: 2025-11-07T18:53:45.472Z
Updated: 2025-11-07T19:06:54.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36006 vulnerable 2026-06-08 07:21:00.373730 IBM Db2 denial of service
MEDIUM (6.5)
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial due to the improper release of resources after use.
Published: 2025-11-07T19:04:05.595Z
Updated: 2025-11-07T19:15:29.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33012 vulnerable 2026-06-08 07:19:01.304834 IBM Db2 improper account lockout
MEDIUM (6.3)
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux could allow an authenticated user to regain access after account lockout due to password use after expiration date.
Published: 2025-11-07T18:38:29.123Z
Updated: 2025-11-07T18:56:16.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2534 vulnerable 2026-06-08 07:16:57.339698 IBM Db2 denial of service
MEDIUM (5.3)
IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.
Published: 2025-11-07T18:36:49.488Z
Updated: 2025-11-07T18:56:31.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47118 vulnerable 2026-06-08 06:48:11.434937 IBM Db2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query
MEDIUM (6.5)
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.
Published: 2025-11-07T18:23:07.665Z
Updated: 2025-11-07T18:48:16.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30449 vulnerable 2026-06-08 06:04:39.380549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30448 vulnerable 2026-06-08 06:04:39.379519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30447 vulnerable 2026-06-08 06:04:39.378515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30446 vulnerable 2026-06-08 06:04:39.377583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30445 vulnerable 2026-06-08 06:04:39.376375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30442 vulnerable 2026-06-08 06:04:39.359239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30431 vulnerable 2026-06-08 06:04:39.294665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29256 vulnerable 2026-06-08 06:02:39.223785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27869 vulnerable 2026-06-08 05:57:42.351636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27868 vulnerable 2026-06-08 05:57:42.350969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27867 vulnerable 2026-06-08 05:57:42.350021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27558 vulnerable 2026-06-08 05:57:42.028134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.