Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:10.5:fp10:*:*:*:*:*:*

part: a version: 10.5 update: fp10

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-40373 vulnerable 2026-06-08 06:09:42.185165 IBM Db2 denial of service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574.
Published: 2023-10-16T23:08:25.937Z
Updated: 2025-02-13T17:07:45.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38728 vulnerable 2026-06-08 06:08:18.731728 IBM Db2 denial of service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query statement. IBM X-Force ID: 262258.
Published: 2023-10-16T21:27:06.469Z
Updated: 2025-02-13T17:02:35.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29257 vulnerable 2026-06-08 06:02:39.225918 IBM Db2 code execution
HIGH (7.2)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM X-Force ID: 252011.
Published: 2023-04-26T12:56:10.502Z
Updated: 2025-02-13T16:49:05.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29255 vulnerable 2026-06-08 06:02:39.200930 IBM DB2 for Linux, UNIX and Windows denial of service
HIGH (7.5)
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a variation of an anonymous block. IBM X-Force ID: 251991.
Published: 2023-04-27T12:47:02.803Z
Updated: 2025-02-13T16:49:04.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27559 vulnerable 2026-06-08 05:57:42.029737 IBM Db2 denial of service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted subquery. IBM X-Force ID: 249196.
Published: 2023-04-26T19:02:45.540Z
Updated: 2024-11-21T18:43:08.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27555 vulnerable 2026-06-08 05:57:42.018219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26022 vulnerable 2026-06-08 05:57:37.859707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25930 vulnerable 2026-06-08 05:56:10.796157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.