Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:db2:12.1.4:*:*:*:*:*:*:*
part: a version: 12.1.4 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Db2 (5963772f-bccc-50e2-883c-858291bf5bb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9762 |
vulnerable | 2026-07-29 01:12:09.640223 |
IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control
HIGH (7.8)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.
Published: 2026-07-17T17:25:53.469Z
Updated: 2026-07-18T03:55:38.232Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7771 |
vulnerable | 2026-07-29 01:09:05.228307 |
IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service
MEDIUM (5.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.
Published: 2026-07-17T19:16:03.169Z
Updated: 2026-07-21T02:03:08.521Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11906 |
vulnerable | 2026-07-29 00:23:31.777003 |
IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user
MEDIUM (6.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns.
Published: 2026-06-30T19:42:08.459Z
Updated: 2026-07-01T15:53:31.824Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10109 |
vulnerable | 2026-07-29 00:20:51.879608 |
IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling
CRITICAL (9.8)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.
Published: 2026-06-30T20:02:13.026Z
Updated: 2026-07-01T17:27:00.915Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36372 |
vulnerable | 2026-07-28 23:42:51.368699 |
IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables
MEDIUM (5.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.
Published: 2026-06-30T20:03:00.050Z
Updated: 2026-07-01T14:29:38.494Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6938 |
vulnerable | 2026-06-08 08:07:05.190893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6053 |
vulnerable | 2026-06-08 08:07:04.418698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6051 |
vulnerable | 2026-06-08 08:07:04.418068 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1718 |
vulnerable | 2026-06-08 07:49:09.459776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1577 |
vulnerable | 2026-06-08 07:49:08.926287 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1352 |
vulnerable | 2026-06-08 07:49:08.397578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13755 |
vulnerable | 2026-06-08 07:06:32.637166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.