Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:unix:*:*

part: a version: 12.1.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target softwareunix
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36442 vulnerable 2026-06-08 07:21:01.771758 IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query with XML columns.
Published: 2026-01-30T21:18:24.037Z
Updated: 2026-02-02T16:32:26.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36428 vulnerable 2026-06-08 07:21:01.727500 IBM Db2 Denial of Service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when the RPSCAN feature is enabled.
Published: 2026-01-30T21:27:26.215Z
Updated: 2026-02-02T16:32:13.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36427 vulnerable 2026-06-08 07:21:01.725510 IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to insufficient validation of special elements in data query logic.
Published: 2026-01-30T21:27:31.388Z
Updated: 2026-02-04T17:27:58.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36425 vulnerable 2026-06-08 07:21:01.723389 IBM Db2 Information Disclosure
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to obtain sensitive information under specific HADR configuration.
Published: 2026-02-17T17:13:03.635Z
Updated: 2026-02-17T19:31:31.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36424 vulnerable 2026-06-08 07:21:01.721387 IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to improper neutralization of special elements in data query logic.
Published: 2026-01-30T21:27:34.569Z
Updated: 2026-02-04T17:28:32.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36423 vulnerable 2026-06-08 07:21:01.719581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36407 vulnerable 2026-06-08 07:21:01.701913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36387 vulnerable 2026-06-08 07:21:01.683458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36366 vulnerable 2026-06-08 07:21:01.640642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36365 vulnerable 2026-06-08 07:21:01.639096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36353 vulnerable 2026-06-08 07:21:01.577761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36247 vulnerable 2026-06-08 07:21:01.521442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36123 vulnerable 2026-06-08 07:21:01.080721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36098 vulnerable 2026-06-08 07:21:00.953744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36070 vulnerable 2026-06-08 07:21:00.825116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36009 vulnerable 2026-06-08 07:21:00.410027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36001 vulnerable 2026-06-08 07:21:00.257177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13867 vulnerable 2026-06-08 07:06:32.874654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.