Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:9.7:fp1:*:*:*:*:*:*

part: a version: 9.7 update: fp1

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5025 vulnerable 2026-06-08 05:26:41.386886 Details available
HIGH (8.4)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661.
Published: 2021-03-11T15:30:26.575Z
Updated: 2024-09-16T20:52:16.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5024 vulnerable 2026-06-08 05:26:41.383758 Details available
HIGH (7.5)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the SSL handshake response. IBM X-Force ID: 193660.
Published: 2021-03-11T15:30:25.884Z
Updated: 2024-09-16T22:40:07.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4976 vulnerable 2026-06-08 05:26:41.281921 Details available
MEDIUM (5.1)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469.
Published: 2021-03-11T15:30:25.232Z
Updated: 2024-09-16T19:20:36.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0712 vulnerable 2026-06-08 05:00:44.587267 Details available
The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.
Published: 2012-03-20T20:00:00.000Z
Updated: 2024-08-06T18:30:54.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0711 vulnerable 2026-06-08 05:00:44.582681 Details available
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
Published: 2012-03-20T20:00:00.000Z
Updated: 2024-08-06T18:30:54.182Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0710 vulnerable 2026-06-08 05:00:44.578513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0709 vulnerable 2026-06-08 05:00:44.563814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1847 vulnerable 2026-06-08 04:58:02.470068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1846 vulnerable 2026-06-08 04:58:02.468582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0731 vulnerable 2026-06-08 04:56:39.388900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3197 vulnerable 2026-06-08 04:55:13.551892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3196 vulnerable 2026-06-08 04:55:13.551567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3195 vulnerable 2026-06-08 04:55:13.551226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3194 vulnerable 2026-06-08 04:55:13.550193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3193 vulnerable 2026-06-08 04:55:13.549163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0462 vulnerable 2026-06-08 04:52:02.742681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.