Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:aix:*:*

part: a version: 12.1.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target softwareaix
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36442 vulnerable 2026-06-08 07:21:01.771965 IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query with XML columns.
Published: 2026-01-30T21:18:24.037Z
Updated: 2026-02-02T16:32:26.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36428 vulnerable 2026-06-08 07:21:01.727521 IBM Db2 Denial of Service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when the RPSCAN feature is enabled.
Published: 2026-01-30T21:27:26.215Z
Updated: 2026-02-02T16:32:13.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36427 vulnerable 2026-06-08 07:21:01.725619 IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to insufficient validation of special elements in data query logic.
Published: 2026-01-30T21:27:31.388Z
Updated: 2026-02-04T17:27:58.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36425 vulnerable 2026-06-08 07:21:01.723546 IBM Db2 Information Disclosure
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to obtain sensitive information under specific HADR configuration.
Published: 2026-02-17T17:13:03.635Z
Updated: 2026-02-17T19:31:31.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36424 vulnerable 2026-06-08 07:21:01.721404 IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to improper neutralization of special elements in data query logic.
Published: 2026-01-30T21:27:34.569Z
Updated: 2026-02-04T17:28:32.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36423 vulnerable 2026-06-08 07:21:01.719600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36407 vulnerable 2026-06-08 07:21:01.702027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36387 vulnerable 2026-06-08 07:21:01.683557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36366 vulnerable 2026-06-08 07:21:01.640664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36365 vulnerable 2026-06-08 07:21:01.639118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36353 vulnerable 2026-06-08 07:21:01.577859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36247 vulnerable 2026-06-08 07:21:01.521464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36123 vulnerable 2026-06-08 07:21:01.080865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36098 vulnerable 2026-06-08 07:21:00.953766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36070 vulnerable 2026-06-08 07:21:00.825229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36009 vulnerable 2026-06-08 07:21:00.410048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36001 vulnerable 2026-06-08 07:21:00.257863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14689 vulnerable 2026-06-08 07:06:34.961505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13867 vulnerable 2026-06-08 07:06:32.875190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.