Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:db2:11.1.0:*:*:*:*:*:*:*
part: a version: 11.1.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Db2 (5963772f-bccc-50e2-883c-858291bf5bb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36131 |
vulnerable | 2026-06-08 07:21:01.113737 |
IBM Db2 information disclosure
MEDIUM (4.6)
IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) clpplus command exposes user credentials to the terminal which could be obtained by a third party with physical access to the system.
Published: 2025-11-07T18:53:45.472Z
Updated: 2025-11-07T19:06:54.110Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36006 |
vulnerable | 2026-06-08 07:21:00.372570 |
IBM Db2 denial of service
MEDIUM (6.5)
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial due to the improper release of resources after use.
Published: 2025-11-07T19:04:05.595Z
Updated: 2025-11-07T19:15:29.778Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33012 |
vulnerable | 2026-06-08 07:19:01.304013 |
IBM Db2 improper account lockout
MEDIUM (6.3)
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux could allow an authenticated user to regain access after account lockout due to password use after expiration date.
Published: 2025-11-07T18:38:29.123Z
Updated: 2025-11-07T18:56:16.588Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2534 |
vulnerable | 2026-06-08 07:16:57.338583 |
IBM Db2 denial of service
MEDIUM (5.3)
IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.
Published: 2025-11-07T18:36:49.488Z
Updated: 2025-11-07T18:56:31.224Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47118 |
vulnerable | 2026-06-08 06:48:11.434143 |
IBM Db2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query
MEDIUM (6.5)
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.
Published: 2025-11-07T18:23:07.665Z
Updated: 2025-11-07T18:48:16.332Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.