Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:11.5.0:*:*:*:*:*:*:*

part: a version: 11.5.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18097 vulnerable 2026-09-16 04:34:01.785124 IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.
MEDIUM (5.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.
Published: 2026-08-12T20:48:29.761Z
Updated: 2026-08-14T22:14:38.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15955 vulnerable 2026-09-16 04:33:06.348735 IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths
HIGH (7.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths.
Published: 2026-09-14T19:58:20.474Z
Updated: 2026-09-15T18:04:58.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17463 vulnerable 2026-09-16 04:33:03.942000 IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption
MEDIUM (6.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption.
Published: 2026-09-14T19:40:28.497Z
Updated: 2026-09-14T20:13:31.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87958 vulnerable 2026-09-16 04:33:01.539550 IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions
HIGH (8.1)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions.
Published: 2026-09-10T21:23:45.286Z
Updated: 2026-09-11T14:46:10.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-86087 vulnerable 2026-09-16 04:32:58.586538 IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system
MEDIUM (4.3)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system.
Published: 2026-09-10T21:24:33.899Z
Updated: 2026-09-11T17:42:52.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-86093 vulnerable 2026-09-16 04:32:58.444087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16480 vulnerable 2026-09-16 04:32:57.112688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16702 vulnerable 2026-09-16 04:32:56.611752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10534 vulnerable 2026-09-16 04:32:43.366582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10543 vulnerable 2026-09-16 04:32:43.203427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10535 vulnerable 2026-09-16 04:32:43.052418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9762 vulnerable 2026-07-29 01:12:09.636780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7771 vulnerable 2026-07-29 01:09:05.225575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11906 vulnerable 2026-07-29 00:23:31.774068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10109 vulnerable 2026-07-29 00:20:51.876249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36372 vulnerable 2026-07-28 23:42:51.365246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6053 vulnerable 2026-06-08 08:07:04.418492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6051 vulnerable 2026-06-08 08:07:04.413415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1718 vulnerable 2026-06-08 07:49:09.459578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1577 vulnerable 2026-06-08 07:49:08.926089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1352 vulnerable 2026-06-08 07:49:08.394299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36136 vulnerable 2026-06-08 07:21:01.217953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36131 vulnerable 2026-06-08 07:21:01.113922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36122 vulnerable 2026-06-08 07:21:01.078375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36008 vulnerable 2026-06-08 07:21:00.407967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36006 vulnerable 2026-06-08 07:21:00.374681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33012 vulnerable 2026-06-08 07:19:01.305714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2534 vulnerable 2026-06-08 07:16:57.340677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14688 vulnerable 2026-06-08 07:06:34.958463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13755 vulnerable 2026-06-08 07:06:32.634265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47118 vulnerable 2026-06-08 06:48:11.435606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.