Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:*:*:*

part: a version: 12.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9762 vulnerable 2026-07-29 01:12:09.638733 IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control
HIGH (7.8)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.
Published: 2026-07-17T17:25:53.469Z
Updated: 2026-07-18T03:55:38.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7771 vulnerable 2026-07-29 01:09:05.227497 IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service
MEDIUM (5.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.
Published: 2026-07-17T19:16:03.169Z
Updated: 2026-07-21T02:03:08.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11906 vulnerable 2026-07-29 00:23:31.775885 IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user
MEDIUM (6.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns.
Published: 2026-06-30T19:42:08.459Z
Updated: 2026-07-01T15:53:31.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10109 vulnerable 2026-07-29 00:20:51.877578 IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling
CRITICAL (9.8)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.
Published: 2026-06-30T20:02:13.026Z
Updated: 2026-07-01T17:27:00.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36372 vulnerable 2026-07-28 23:42:51.365465 IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables
MEDIUM (5.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.
Published: 2026-06-30T20:03:00.050Z
Updated: 2026-07-01T14:29:38.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6938 vulnerable 2026-06-08 08:07:05.190770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6053 vulnerable 2026-06-08 08:07:04.418676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6051 vulnerable 2026-06-08 08:07:04.415683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1718 vulnerable 2026-06-08 07:49:09.459751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1577 vulnerable 2026-06-08 07:49:08.926255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1352 vulnerable 2026-06-08 07:49:08.396483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36186 vulnerable 2026-06-08 07:21:01.369036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36185 vulnerable 2026-06-08 07:21:01.364549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36136 vulnerable 2026-06-08 07:21:01.218305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36131 vulnerable 2026-06-08 07:21:01.114175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36122 vulnerable 2026-06-08 07:21:01.078597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36008 vulnerable 2026-06-08 07:21:00.408166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36006 vulnerable 2026-06-08 07:21:00.376022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33012 vulnerable 2026-06-08 07:19:01.306839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2534 vulnerable 2026-06-08 07:16:57.347261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14688 vulnerable 2026-06-08 07:06:34.958661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13755 vulnerable 2026-06-08 07:06:32.636435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47118 vulnerable 2026-06-08 06:48:11.437106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.