GCVE - cpe:2.3:a:ibm:db2:*:fp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:*:fp1:*:*:*:*:*:*

part: a version: * update: fp1

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Db2 (`5963772f-bccc-50e2-883c-858291bf5bb7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0757`	vulnerable	2026-06-08 04:56:39.608902	Details available IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to execute non-DDL statements by leveraging previous possession of this authority. Published: 2011-02-02T22:00:00.000Z Updated: 2024-08-06T22:05:53.424Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC66815 http://www.ibm.com/support/docview.wss?uid=swg1IC66814 http://secunia.com/advisories/43148 http://www.ibm.com/support/docview.wss?uid=swg1IC66815 http://www.ibm.com/support/docview.wss?uid=swg21426108	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1905`	vulnerable	2026-06-08 04:51:25.638042	Details available The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors. Published: 2009-06-03T20:35:00.000Z Updated: 2024-08-07T05:27:54.880Z Open on db.gcve.eu Reference links ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT https://exchange.xforce.ibmcloud.com/vulnerabilities/50909 http://www-01.ibm.com/support/docview.wss?uid=swg21318189 http://www.securityfocus.com/bid/36540 http://www.securityfocus.com/bid/35171	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4693`	vulnerable	2026-06-08 04:50:47.791556	Details available The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES." Published: 2008-10-22T17:00:00.000Z Updated: 2024-08-07T10:24:20.982Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46022 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28489 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ23915 http://www.vupen.com/english/advisories/2008/2893	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4692`	vulnerable	2026-06-08 04:50:47.777744	Details available The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors. Published: 2008-10-22T17:00:00.000Z Updated: 2024-08-07T10:24:20.983Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46021 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22306 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22307 http://secunia.com/advisories/31787	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.