GCVE - cpe:2.3:a:ibm:db2:*:fp6a:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:*:fp6a:*:*:*:*:*:*

part: a version: * update: fp6a

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Db2 (`5963772f-bccc-50e2-883c-858291bf5bb7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1847`	vulnerable	2026-06-08 04:58:02.469816	Details available IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly enforce privilege requirements for table access, which allows remote authenticated users to modify SYSSTAT.TABLES statistics columns via an UPDATE statement. NOTE: some of these details are obtained from third party information. Published: 2011-05-03T20:00:00.000Z Updated: 2024-08-06T22:45:58.674Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/1083 http://www-01.ibm.com/support/docview.wss?uid=swg1IC72119 https://exchange.xforce.ibmcloud.com/vulnerabilities/66979 http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC72119 http://www.securityfocus.com/bid/47525	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1846`	vulnerable	2026-06-08 04:58:02.459159	Details available IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from groups, which allows remote authenticated users to execute non-DDL statements by leveraging previous inherited possession of a role, a different vulnerability than CVE-2011-0757. NOTE: some of these details are obtained from third party information. Published: 2011-05-03T20:00:00.000Z Updated: 2024-08-06T22:45:58.648Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC71375 https://exchange.xforce.ibmcloud.com/vulnerabilities/66980 http://www-01.ibm.com/support/docview.wss?uid=swg1IC71263 http://www.vupen.com/english/advisories/2011/1083 http://www.securityfocus.com/bid/47525	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0731`	vulnerable	2026-06-08 04:56:39.380461	Details available Buffer overflow in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors. Published: 2011-02-01T17:00:00.000Z Updated: 2024-08-06T22:05:52.919Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg1IC71203 http://www.securityfocus.com/bid/46052 http://www.osvdb.org/70683 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14699 http://www-01.ibm.com/support/docview.wss?uid=swg1IC72028	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1239`	vulnerable	2026-06-08 04:51:13.995578	Details available IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query. Published: 2009-04-03T18:00:00.000Z Updated: 2024-08-07T05:04:49.437Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/49864 http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886 http://www-01.ibm.com/support/docview.wss?uid=swg21381257 http://www.vupen.com/english/advisories/2009/0912	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.