Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:big_sql:7.6:*:*:*:*:*:*:*

part: a version: 7.6 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBig Sql (08ab2fc6-15b1-5cb5-b44d-47494c7b07ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-39724 vulnerable 2026-06-08 06:41:51.456661 IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API
MEDIUM (5.3)
IBM Db2 Big SQL on Cloud Pak for Data versions 7.6 (on CP4D 4.8), 7.7 (on CP4D 5.0), and 7.8 (on CP4D 5.1) do not properly limit the allocation of system resources. An authenticated user with internal knowledge of the environment could exploit this weakness to cause a denial of service.
Published: 2026-02-04T20:52:21.777Z
Updated: 2026-02-04T21:30:20.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35160 vulnerable 2026-06-08 06:37:35.347586 IBM Watson Query on Cloud Pak for Data and IBM Db2 Big SQL on Cloud Pak for Data information disclosure
MEDIUM (4.3)
IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.
Published: 2024-11-23T13:48:16.110Z
Updated: 2024-11-24T12:30:18.144Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.