Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:11.5.9:*:*:*:*:*:*:*

part: a version: 11.5.9 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18097 vulnerable 2026-09-16 04:34:01.785956 IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.
MEDIUM (5.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.
Published: 2026-08-12T20:48:29.761Z
Updated: 2026-08-14T22:14:38.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15955 vulnerable 2026-09-16 04:33:06.349664 IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths
HIGH (7.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths.
Published: 2026-09-14T19:58:20.474Z
Updated: 2026-09-15T18:04:58.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17463 vulnerable 2026-09-16 04:33:03.942855 IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption
MEDIUM (6.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption.
Published: 2026-09-14T19:40:28.497Z
Updated: 2026-09-14T20:13:31.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87958 vulnerable 2026-09-16 04:33:01.540624 IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions
HIGH (8.1)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions.
Published: 2026-09-10T21:23:45.286Z
Updated: 2026-09-11T14:46:10.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-86087 vulnerable 2026-09-16 04:32:58.587381 IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system
MEDIUM (4.3)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system.
Published: 2026-09-10T21:24:33.899Z
Updated: 2026-09-11T17:42:52.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-86093 vulnerable 2026-09-16 04:32:58.444931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16480 vulnerable 2026-09-16 04:32:57.113623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16702 vulnerable 2026-09-16 04:32:56.612913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10534 vulnerable 2026-09-16 04:32:43.367543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10543 vulnerable 2026-09-16 04:32:43.204052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10535 vulnerable 2026-09-16 04:32:43.053365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9762 vulnerable 2026-07-29 01:12:09.637844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7771 vulnerable 2026-07-29 01:09:05.226664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11906 vulnerable 2026-07-29 00:23:31.775025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10109 vulnerable 2026-07-29 00:20:51.876996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36372 vulnerable 2026-07-28 23:42:51.365433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6053 vulnerable 2026-06-08 08:07:04.418646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6051 vulnerable 2026-06-08 08:07:04.414817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1718 vulnerable 2026-06-08 07:49:09.459617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1577 vulnerable 2026-06-08 07:49:08.926141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1352 vulnerable 2026-06-08 07:49:08.395604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36136 vulnerable 2026-06-08 07:21:01.218193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36131 vulnerable 2026-06-08 07:21:01.114041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36122 vulnerable 2026-06-08 07:21:01.078555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36008 vulnerable 2026-06-08 07:21:00.408011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36006 vulnerable 2026-06-08 07:21:00.375439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33012 vulnerable 2026-06-08 07:19:01.306282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2534 vulnerable 2026-06-08 07:16:57.346104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14688 vulnerable 2026-06-08 07:06:34.958510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13755 vulnerable 2026-06-08 07:06:32.635400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47118 vulnerable 2026-06-08 06:48:11.436181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.