Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:windows:*:*
part: a version: 12.1.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Db2 (5963772f-bccc-50e2-883c-858291bf5bb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | windows |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36442 |
vulnerable | 2026-06-08 07:21:01.771987 |
IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query with XML columns.
Published: 2026-01-30T21:18:24.037Z
Updated: 2026-02-02T16:32:26.688Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36428 |
vulnerable | 2026-06-08 07:21:01.727648 |
IBM Db2 Denial of Service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when the RPSCAN feature is enabled.
Published: 2026-01-30T21:27:26.215Z
Updated: 2026-02-02T16:32:13.261Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36427 |
vulnerable | 2026-06-08 07:21:01.725710 |
IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to insufficient validation of special elements in data query logic.
Published: 2026-01-30T21:27:31.388Z
Updated: 2026-02-04T17:27:58.864Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36425 |
vulnerable | 2026-06-08 07:21:01.723567 |
IBM Db2 Information Disclosure
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to obtain sensitive information under specific HADR configuration.
Published: 2026-02-17T17:13:03.635Z
Updated: 2026-02-17T19:31:31.869Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36424 |
vulnerable | 2026-06-08 07:21:01.721505 |
IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to improper neutralization of special elements in data query logic.
Published: 2026-01-30T21:27:34.569Z
Updated: 2026-02-04T17:28:32.979Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36423 |
vulnerable | 2026-06-08 07:21:01.719699 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36407 |
vulnerable | 2026-06-08 07:21:01.702047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36387 |
vulnerable | 2026-06-08 07:21:01.683575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36384 |
vulnerable | 2026-06-08 07:21:01.675370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36366 |
vulnerable | 2026-06-08 07:21:01.640819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36365 |
vulnerable | 2026-06-08 07:21:01.639141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36353 |
vulnerable | 2026-06-08 07:21:01.577881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36247 |
vulnerable | 2026-06-08 07:21:01.521484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36123 |
vulnerable | 2026-06-08 07:21:01.080892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36098 |
vulnerable | 2026-06-08 07:21:00.953894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36070 |
vulnerable | 2026-06-08 07:21:00.825251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36009 |
vulnerable | 2026-06-08 07:21:00.410068 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36001 |
vulnerable | 2026-06-08 07:21:00.259023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13867 |
vulnerable | 2026-06-08 07:06:32.875960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.