IBM DB2 10.5 Fixpack 4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:*

part: a version: 10.5 update: fp4

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-40373 vulnerable 2026-06-08 06:09:42.187957 IBM Db2 denial of service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574.
Published: 2023-10-16T23:08:25.937Z
Updated: 2025-02-13T17:07:45.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38728 vulnerable 2026-06-08 06:08:18.734387 IBM Db2 denial of service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query statement. IBM X-Force ID: 262258.
Published: 2023-10-16T21:27:06.469Z
Updated: 2025-02-13T17:02:35.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30987 vulnerable 2026-06-08 06:04:41.570229 IBM Db2 denial of service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440.
Published: 2023-10-16T20:48:07.845Z
Updated: 2025-02-13T16:49:39.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29257 vulnerable 2026-06-08 06:02:39.226112 IBM Db2 code execution
HIGH (7.2)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM X-Force ID: 252011.
Published: 2023-04-26T12:56:10.502Z
Updated: 2025-02-13T16:49:05.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29255 vulnerable 2026-06-08 06:02:39.204260 IBM DB2 for Linux, UNIX and Windows denial of service
HIGH (7.5)
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a variation of an anonymous block. IBM X-Force ID: 251991.
Published: 2023-04-27T12:47:02.803Z
Updated: 2025-02-13T16:49:04.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27559 vulnerable 2026-06-08 05:57:42.030015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27555 vulnerable 2026-06-08 05:57:42.018292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26022 vulnerable 2026-06-08 05:57:37.863007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25930 vulnerable 2026-06-08 05:56:10.798526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5025 vulnerable 2026-06-08 05:26:41.387983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5024 vulnerable 2026-06-08 05:26:41.385524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4976 vulnerable 2026-06-08 05:26:41.301007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.