Db2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:*:*:*

part: a version: 12.1.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36186 vulnerable 2026-06-08 07:21:01.369185 IBM Db2 privilege escalation
HIGH (7.4)
IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations could allow a local user to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges operated at a higher than minimum level.
Published: 2025-11-07T18:40:32.478Z
Updated: 2026-02-26T17:47:07.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36136 vulnerable 2026-06-08 07:21:01.218410 IBM denial of service
MEDIUM (5.1)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local user to cause a denial of service due to the database monitor script incorrectly detecting that the instance is still starting under specific conditions.
Published: 2025-11-07T18:45:46.550Z
Updated: 2025-11-07T18:53:53.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36131 vulnerable 2026-06-08 07:21:01.114281 IBM Db2 information disclosure
MEDIUM (4.6)
IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) clpplus command exposes user credentials to the terminal which could be obtained by a third party with physical access to the system.
Published: 2025-11-07T18:53:45.472Z
Updated: 2025-11-07T19:06:54.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36122 vulnerable 2026-06-08 07:21:01.078631 IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automatic
MEDIUM (6.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service using a specially crafted SQL query due to improper allocation of system resources.
Published: 2026-04-30T21:48:49.826Z
Updated: 2026-05-27T16:34:17.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36008 vulnerable 2026-06-08 07:21:00.408193 IBM Db2 denial of service
MEDIUM (6.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper allocation of resources.
Published: 2025-11-07T18:57:09.615Z
Updated: 2025-11-07T19:10:03.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36006 vulnerable 2026-06-08 07:21:00.378196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33012 vulnerable 2026-06-08 07:19:01.308378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2534 vulnerable 2026-06-08 07:16:57.348319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14688 vulnerable 2026-06-08 07:06:34.960781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47118 vulnerable 2026-06-08 06:48:11.438818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.